You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/routes/solid-start/guides/security.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,7 @@ This can also be achieved through an `onRequest` [middleware](/solid-start/refer
28
28
29
29
## Cross Site Scripting (XSS)
30
30
31
-
SolidStart automatically escape inserts and attributes in HTML.
31
+
SolidStart automatically escape inserts and attributes in HTML.
32
32
The exception is when HTML is inserted via the `innerHTML` property, which bypasses the escaping.
33
33
Additionally, it's important to note that `<noscript>` are also outside of the purview of SolidStart, since those tags and its contents are evaluated even without JavaScript.
34
34
It is important to sanitize any strings in attributes, especially when inside `<noscript>` tags.
0 commit comments