You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I.e. they are just making it a no-op, not doing any sanitization.
It's also a bit annoying that you can't call setHooks() more than once, which can lead to unexpected errors if someone earlier in the page load called setHooks before you did.
Currently
setHooks
is required to allowlwc:inner-html
, but it seems that most consumers are just doing:I.e. they are just making it a no-op, not doing any sanitization.
It's also a bit annoying that you can't call
setHooks()
more than once, which can lead to unexpected errors if someone earlier in the page load calledsetHooks
before you did.Potentially the original issue this was designed to solve could be solved by CSP and/or TrustedTypes. We should re-evaluate whether we still need this API or not.
The text was updated successfully, but these errors were encountered: