Why the Sanitizer API is just `setHTML()` (by freddyb) — discussion

#browsers #security #web