Skip to content

Add new sinks from SanitizerAPI #367

@leeN

Description

@leeN

The Sanitizer API adds some API functions that are potentially unsafe, e.g., setHTMLUnsafe and its ShadowRoot variation, as well as Document.parseHTMLUnsafe.

Those depend on how you use it as a potential XSS vector, so we should add them as sinks.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request
No fields configured for Feature.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions