Skip to content

Conversation

Shivam7-1
Copy link

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML. Always be cautious when dealing with user input or dynamic content to prevent security risks.

@Shivam7-1
Copy link
Author

Hi @sirdarckcat Could You Please Review this PR
Thanks

@Shivam7-1
Copy link
Author

Hi @sirdarckcat Could You Please Review this PR

Thanks

@NeilFraser
Copy link

I'm not on this project's team, but this PR would result in raw HTML being printed on the user's screen. Here innerHTML is being used intentionally since there's an <H1> tag.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants