Samuel
@samuel.fm
big day for the PHP community
Firefox for Web Developers@webdevs.firefox.com· 24 Feb
The Sanitizer API landed in Firefox 148, along with element.setHTML(). This lets you fully configure how HTML strings are cleaned as they're parsed. hacks.mozilla.org/2026/02/good...
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 – Mozilla Hacks - the Web developer blog
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted…
hacks.mozilla.org
2 2 50
Banda Bassotti
Bigger day than when setHTMLUnsafe came out last year. Correct order to do it, IMO.