From aadb4cef971dd04c628df696d4d90542ebb9c843 Mon Sep 17 00:00:00 2001 From: Kate Higa <16447748+khiga8@users.noreply.github.com> Date: Thu, 12 Jan 2023 13:26:01 -0500 Subject: [PATCH] Update no-inner-html.md --- docs/rules/no-inner-html.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/rules/no-inner-html.md b/docs/rules/no-inner-html.md index 92a7add1..518e8693 100644 --- a/docs/rules/no-inner-html.md +++ b/docs/rules/no-inner-html.md @@ -8,7 +8,9 @@ Using `innerHTML` poses a potential security risk. Prefer using `textContent` to set text to an element. -https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9 +[Related security notification](https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9) + +It may be reasonable to disable this rule in testing setups that use known, trusted input and carry little security risk. 👎 Examples of **incorrect** code for this rule: