Skip to content
This repository was archived by the owner on Aug 22, 2025. It is now read-only.

Conversation

@Shivam7-1
Copy link

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML. Always be cautious when dealing with user input or dynamic content to prevent security risks.

@Shivam7-1
Copy link
Author

Hi @AlexLloyd0 Could You Please Review this PR
Thanks

@NeilFraser
Copy link

This PR would break this product by printing raw HTML on the user's screen.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants