Seonglae ChoSanitary API
HTML Sanitizer API
Web applications often need to work with strings of HTML on the client side, perhaps as part of a client-side templating solution, perhaps as part of rendering user generated content, etc. It is difficult to do so in a safe way.
https://wicg.github.io/sanitizer-api/
HTML Sanitizer API
Three cheers for (draft stage) progress on a Sanitizer API! It's gospel that you can't trust user input. And indeed, any app I've ever worked on has dealt with bad actors trying to slip in and execute nefarious code somewhere it shouldn't.
https://css-tricks.com/html-sanitizer-api/
