Add a security page
Open
@rictic is already working on this.
Since Mar 14, 2022.
- Dominant language
- TypeScript
- Stars
- 142
- Forks
- 230
- PR merge metrics
- No merged PRs in 30d
Description
We should have a page that talks about all the security protections and considerations when using Lit.
* Built-in XSS protection
* TemplateResult forging prevention
* Trusted Types
* `css` tag expression limitations
* `unsafeHtml` and `unsafeSvg`
* `unsafeStatic` and `literal`
* Using Lit with CSP and the `litNonce` property
Related issues:
- https://github.com/lit/lit.dev/issues/448
- https://github.com/lit/lit.dev/issues/446
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.