logoalt Hacker News

Retr0idyesterday at 5:45 PM0 repliesview on HN

> you can already do sanitation by writing a function to check input before passing it to innerHTML

This is like saying C is memory safe as long as your code doesn't have any bugs.

More saliently, it does not consider parser differentials.