Security news

setHTML(), Trusted Types and the Sanitizer API

New setHTML() and Sanitizer API prevent XSS by safely inserting HTML into the DOM.