Skip to content

Commit

Permalink
Update no-inner-html.md
Browse files Browse the repository at this point in the history
  • Loading branch information
khiga8 authored and dgreif committed Mar 23, 2023
1 parent 3d38ceb commit aadb4ce
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion docs/rules/no-inner-html.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,9 @@

Using `innerHTML` poses a potential security risk. Prefer using `textContent` to set text to an element.

https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9
[Related security notification](https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9)

It may be reasonable to disable this rule in testing setups that use known, trusted input and carry little security risk.

👎 Examples of **incorrect** code for this rule:

Expand Down

0 comments on commit aadb4ce

Please sign in to comment.