Mozilla Hacks company blog
Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API…
- Points
- 373
- HN comments
- 159
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 24, 2026 | Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148 by todsacerdoti | 373 | 159 |
