This repository was archived by the owner on Dec 19, 2023. It is now read-only.

Mismatched .innerHTML and .innerText#1

Open

MegaLoler wants to merge 2 commits into418sec:masterfrom

MegaLoler:master

Commits on Dec 23, 2020

innerHTML was being set to innerText, allowing escaped html to be unescaped and then rendered
negativefnnancy
committed

Commits on Jan 25, 2021

change use of innerText to innerHTML in demo/index.html to prevent XSS
MegaLoler
committed