Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148

**Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148**

Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We expect other browsers to follow soon. An XSS vulnerability arises when a website inadvertently lets attackers inject arbitrary HTML or JavaScript through user-generated content...

---

**[devsupporter 해설]**

이 기사는 Mozilla Hacks에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.