Comment

Comment by fluxsauce

Scary headline; FTA:

> Don’t worry, though – another, hopefully better, protection measure is on the way.

> Another feature is in development to help: an application programming interface (API) called Trusted Types. Trusted types treats user input as untrustworthy by default and forces developers to take steps to sanitise it before it can be included in a web page.

A better headline may be "Google Chrome replacing XSS Auditor with Trusted Types"

parent fluxsauce 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton