So I found insertAdjacentHTML . Is this still as terrible

Question

So I found insertAdjacentHTML . Is this still as terrible

as innerHTML ?
The only security considerations it has are:
"When inserting HTML into a page by using insertAdjacentHTML(), be careful not to use user input that hasn't been escaped.

It is not recommended you use insertAdjacentHTML() when inserting plain text; instead, use the Node.textContent property or the Element.insertAdjacentText() method. This doesn't interpret the passed content as HTML, but instead inserts it as raw text."

0

22.09.2021

8 ответов

33 просмотра

Hossein Автор вопроса

Amos
Yup.. It is as terrible

Damn

0

22.09.2021

Amos

Hossein
Damn

Why?

0

22.09.2021

Amos

Hossein
Damn

Oh.. I've just read the conversation above..

0

22.09.2021

Thomas

The problem isn't "which API is good for inserting HTML", the problem is "inserting HTML as your main way of building up webpage content dynamically" is bad

0

22.09.2021

Hossein Автор вопроса

Thomas
The problem isn't "which API is good for inserting...

Ah...

0

22.09.2021

Friday Candour [Ask to PM]

Thomas
The problem isn't "which API is good for inserting...

Yeah that's the point where it should be avoided

0

22.09.2021