mirror of
https://github.com/taigrr/wasm-experiments
synced 2025-01-18 04:03:21 -08:00
Use innerText instead of innerHTML to discourage XSS risks
Roberto Clapis (@empijei) pointed out to me that using innerHTML for unformatted text is bad practice, so I've switched to using innerText and SetTextContent instead.
This commit is contained in:
@@ -16,7 +16,7 @@ type writer dom.Element
|
||||
// Write implements io.Writer.
|
||||
func (d writer) Write(p []byte) (n int, err error) {
|
||||
node := dom.GetDocument().CreateElement("div")
|
||||
node.SetInnerHTML(string(p))
|
||||
node.SetTextContent(string(p))
|
||||
(*dom.Element)(&d).AppendChild(node)
|
||||
return len(p), nil
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user