Post

Rendering Markdown comments safely: setHTML(), DOMPurify, and Trusted Types. Agustin Barrientos builds one explicit allowlist for setHTML() with a DOMPurify fallback and enforces it with Trusted Types. #security #html agustinbarrientos.co...