4 ms·
Really happy to see it, after 25 years (https://www.bugcrowd.com/glossary/cross-site-scripting-xss/ https://www.bugcrowd.com/glossary/cross-site-scripting-xss/)
by CaptainOfCoit 1y ago
Really happy to see it, after 25 years (https://www.bugcrowd.com/glossary/cross-site-scripting-xss/ https://www.bugcrowd.com/glossary/cross-site-scripting-xss/) of surviving without it. It always struck me as an obvious missing part of the DOM API, and I still don't know why it took this long time.
But mostly I'm just happy that it's finally here, I do appreciate all the hard work people been doing to get this live.
- theendisney 1y agoYes <sc<script>ript>
- bawolff 1y agoI think DOM api people just really wanted everyone to use .appendChild() methods. I think there is an interesting lesson here about how security is partially an ergonomic problem.