<?xml version="1.0" encoding="UTF-8"?>
<feature id="sanitizer"><name>Sanitizer API</name><description>The Document.parseHTML() static method and the setHTML() method of Element and ShadowRoot objects parse and insert HTML into the DOM in a way that can prevent cross-site scripting attacks. The Sanitizer API can customize the sanitization process.</description><baseline><status>limited</status></baseline><support><browser name="chrome" version="146" supported="true"></browser><browser name="firefox" version="148" supported="true"></browser><browser name="safari" version="—" supported="false"></browser><browser name="edge" version="146" supported="true"></browser><browser name="chrome_android" version="146" supported="true"></browser><browser name="firefox_android" version="148" supported="true"></browser><browser name="safari_ios" version="—" supported="false"></browser></support><specifications><spec>https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#html-sanitization</spec></specifications><caniuse></caniuse><mdn_url>https://developer.mozilla.org/docs/Web/API/Sanitizer</mdn_url><compat_features><key>api.Document.parseHTML_static</key><key>api.Element.setHTML</key><key>api.Sanitizer</key><key>api.Sanitizer.Sanitizer</key><key>api.Sanitizer.allowAttribute</key><key>api.Sanitizer.allowElement</key><key>api.Sanitizer.get</key><key>api.Sanitizer.removeAttribute</key><key>api.Sanitizer.removeElement</key><key>api.Sanitizer.removeUnsafe</key><key>api.Sanitizer.replaceElementWithChildren</key><key>api.Sanitizer.setComments</key><key>api.Sanitizer.setDataAttributes</key><key>api.ShadowRoot.setHTML</key></compat_features><canonical_url>https://nowyoucanuse.com/features--sanitizer.html</canonical_url></feature>