2 ms·
For a good reason. XSS is no joke. I even block innerHTML and friends in my apps via empty trusted-types and require-trusted-types-for 'script' CSP.
by megous 6y ago
For a good reason. XSS is no joke. I even block innerHTML and friends in my apps via empty trusted-types and require-trusted-types-for 'script' CSP.