4 ms·
Yes, although a slightly more relevant way of putting it would be that it's an inbuilt DOMPurify (dompurify being an npm package commonly used to sanitize html
by Octoth0rpe 1y ago
Yes, although a slightly more relevant way of putting it would be that it's an inbuilt DOMPurify (dompurify being an npm package commonly used to sanitize html before injecting it).
- ngold 1y agoIs this basically doing the same thing as https now? But for http, and firefox just never implemented a simple fix for it's entire existence until now? I obviously know nothing about this, but I still find it fascinating. Or am I off my block.
- masklinn 1y agoThis has nothing whatsoever to do with http.
- bilekas 1y agoXSS isn't related to https/ssl, ssl is the secure conncetion between you and the server, but xss is the injection of data into the site which will be executed in your browser in this case. The connection isnt relevant. https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XSS#overview https://developer.mozilla.org/en-US/docs/Web/Security/Attack...