TLDR InfoSec · QUICK LINKS

GOODBYE INNERHTML, HELLO SETHTML: STRONGER XSS PROTECTION IN FIREFOX 148

hacks.mozilla.org3 min read

Summary from the TLDR InfoSec newsletter

Firefox 148 introduces the standardized Sanitizer API and the new setHTML() method to make inserting untrusted HTML safer by default, reducing XSS risk without major code rewrites.