rustycogsFeb 24
Mayank

RE: https://mastodon.social/@firefoxwebdevs/116126004343119741

Firefox is the first to ship the incredibly useful `setHTML` function (part of the Sanitizer API). https://hacks.mozilla.org/2026/02/goodbye-innerhtml-hello-sethtml-stronger-xss-protection-in-firefox-148/

and looks like it will be in the next release of Chrome as well. 👀

Feb 24 at 2:22pmWeb
Show threadMayankFeb 24
interesting that `setHTML`, unlike `setHTMLUnsafe`, doesn't work with strings that contain declarative shadow DOM. 🤔