Update inner.html DOM text reinterpreted as HTML

google / closure-library

Google's common JavaScript library

code.google.com/closure/library/

Apache License 2.0

4.88k stars 1.05k forks source link

Update inner.html DOM text reinterpreted as HTML #1225

Closed Shivam7-1 closed 5 months ago

Shivam7-1 commented 5 months ago

By using textContent, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML.

Shivam7-1 commented 5 months ago

Hi @12wrigja Could You Please Review This PR Thanks

trevorade commented 5 months ago

Please see https://github.com/google/closure-library/issues/1214.

TL;DR: Closure Library is in maintenance mode, and we aren't accepting PRs at this time that aren't considered critical.