Back to Interop 2027 proposals

Web Sanitizer API

Proposed by web-platform-tests/interop#1336
Participate in this proposal on GitHub

Direct 1-click actions are temporarily unavailable for Interop proposals pending repository app approval. Cast your vote by adding a +1 reaction or join the discussion directly on GitHub.

Open issue on GitHub
  • The setHTML() method inserts HTML into the DOM in a way that prevents cross-site scripting attacks.
  • The parseHTML() method of the Document object provides an XSS-safe method to parse and sanitize a string of HTML in order to create a new Document.

I will limit the scope to setHTML() and Document.parseHTML() (unless it is feasible to also include the newer methods - replaceWithHTML, appendHTML, prependHTML, beforeHTML, afterHTML - which have landed in Chrome 154)

Discussion on GitHub (0)

No comments on GitHub yet

Be the first developer to share technical feedback or use cases on this Interop proposal.

Join discussion on GitHub

Signing in with GitHub allows you to cast one-click upvotes and submit structured use cases directly to the web-platform-dx/developer-signals repository.

Our GitHub App only requests access to issue discussions. It never requests or has access to your personal repositories or code.
Sign in with GitHub
Strict feedback template: Please be as concrete as possible. Specific examples from your production apps or projects provide the highest-value signal to standards editors and browser engineers.
Add your specific real-world use cases, even if they seem obvious to you.
0 / 5000 (min 10)
Are you having to use another feature instead, a polyfill, or is it blocking you completely? Why are the alternatives worse?
0 / 5000 (min 10)
Markdown formatting is supported.