3 ms·
> textContent = response Good question (that none of the replies seem to address). That is exactly what I would do if rendering 'tainted' text. Can someone p
by alcover 5y ago
> textContent = response
Good question (that none of the replies seem to address).
That is exactly what I would do if rendering 'tainted' text.
Can someone please tell us how it could be defeated ?
- tgsovlerkhgsel 5y agoThis should be safe.
- trulyme 5y ago...unless it is a text that the attacker shows to another user, in which case they can trick this user to perform some action (send cryptocurrency,...).