top | item 47140368

(no title)

goatlover | 5 days ago

Forums would already have code that sanitizes user input when it's submitted. Users aren't directly setting html elements.

discuss

order

afavour|5 days ago

And is that sanitization perfect? Kept up to date?

With a safe API like this one that's tied to the browser's own interpretation of HTML (i.e. it is perfectly placed to know exactly what is and isn't dangerous given it is the one rendering it) wouldn't it be much better to rely on that?