@mathias hrm, the problem to me is not using createTextNode to escape HTML. it's using innerHTML to create DOM. the latter is the gotcha.
-
-
-
@jedschmidt Fair point. But seeing as that’s what most templating engines are using, `innerHTML` probably isn’t going away anytime soon :( - 3 more replies
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
JavaScript, HTML, CSS, HTTP, performance, security, Bash, Unicode, i18n, macOS.