TLDR InfoSec · QUICK LINKS
GOODBYE INNERHTML, HELLO SETHTML: STRONGER XSS PROTECTION IN FIREFOX 148
Summary from the TLDR InfoSec newsletter
Firefox 148 introduces the standardized Sanitizer API and the new setHTML() method to make inserting untrusted HTML safer by default, reducing XSS risk without major code rewrites.