Skip to content

DOM text reinterpreted as HTML Update utils.domManipulation.js#2618

Open
Shivam7-1 wants to merge 2 commits intoknockout:masterfrom
Shivam7-1:patch-1
Open

DOM text reinterpreted as HTML Update utils.domManipulation.js#2618
Shivam7-1 wants to merge 2 commits intoknockout:masterfrom
Shivam7-1:patch-1

Conversation

@Shivam7-1
Copy link

@Shivam7-1 Shivam7-1 commented Apr 2, 2025

By using DOMPurify it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities.

@Shivam7-1
Copy link
Author

Hii @mbest could you please Review this PR
Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants