| ▲ | DoctorOW 10 hours ago | |||||||
They do link the default configuration for "safe": https://wicg.github.io/sanitizer-api/#built-in-safe-default-... But I agree, my default approach has usually been to only use innerText if it has untrusted content: So if their demo is this:
Mine would be: | ||||||||
| ▲ | itishappy 9 hours ago | parent [-] | |||||||
What if I wanted an <h2>? Edit: I don't mean this flippantly. If I want to render, say, my blog entry on your site, will I need to select every markup element from a dropdown list of custom elements that only accept text a la Wordpress? | ||||||||
| ||||||||