AdguardTeam / AdguardTeam/Scriptlets
Improve 'prevent-innerHTML' — support 'setHTMLUnsafe' and 'setHTML' methods
Open
enhancement
Priority: P4
- Dominant language
- JavaScript
- Stars
- 195
- Forks
- 33
- PR merge metrics
- No merged PRs in 30d
Description
The `prevent-innerHTML` scriptlet currently only covers `innerHTML` setter.
It should also cover the newer `Element.setHTMLUnsafe()` and `Element.setHTML()` methods, which can be used as alternatives to `innerHTML`.
References:
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTMLUnsafe
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTML
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.