Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148

Tom SchusterMozilla HacksPublished Aug 26, 2026, 01:10 AM0 reads

Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web.

The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone.

We […] The post Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 appeared first on Mozilla Hacks - the Web developer blog.

Read the original at hacks.mozilla.org Open original ↗

Share this signal

Related articles