← Lcoalhost
Blocking `<script>` Won't Stop innerHTML XSS. `setHTML()` Will.
Source :
DEV
See it live in context on Lcoalhost →
