Security comment for unsafe

Kotlin / kotlinx.html

Kotlin DSL for HTML

Apache License 2.0

1.6k stars 130 forks source link

Security comment for unsafe #245

Closed vonox7 closed 7 months ago

vonox7 commented 9 months ago

There is no explanation for why "unsafe" is considered "not safe." A developer who is unaware of the implications might not realize that this is related to XSS and currently has no straightforward way of figuring this out.

This comment provides:

An explanation of what is happening.
The use of technical terms (XSS) to allow users to search for more relevant information.
Two action items.

e5l commented 7 months ago

Hey @vonox7, thanks for the PR. That's a good note, LGTM