DOM construction helpers that cannot be made to inject markup.
The safe counterpart to innerHTML: text goes in as text, attributes are vetted, and SVG
icons are built from path data rather than parsed from a string. This is the surface the
security rule points at when it forbids reaching for innerHTML directly.
DOM construction helpers that cannot be made to inject markup.
The safe counterpart to
innerHTML: text goes in as text, attributes are vetted, and SVG icons are built from path data rather than parsed from a string. This is the surface the security rule points at when it forbids reaching forinnerHTMLdirectly.