logoalt Hacker News

llcooliovicetoday at 6:54 AM1 replyview on HN

> There's no fundamental templating knowledge that's portable between stacks, and native DOM creation APIs like innerHTML are unsafe by default.

setHTML() is already implemented in Chrome/Edge and Firefox so this point is a bit outdated - there is a safe alternative to innerHTML.


Replies

infensustoday at 10:42 AM

MDN and caniuse say otherwise. I think there might've been an older specification that got implemented, but it's been revised since

show 1 reply