From 53824dadea3066e68d30c6b8af9437e9216713dd Mon Sep 17 00:00:00 2001 From: Kate Higa <16447748+khiga8@users.noreply.github.com> Date: Thu, 12 Jan 2023 13:26:01 -0500 Subject: [PATCH] Update no-inner-html.md --- docs/rules/no-inner-html.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/rules/no-inner-html.md b/docs/rules/no-inner-html.md index b2456f9d..c2ef8671 100644 --- a/docs/rules/no-inner-html.md +++ b/docs/rules/no-inner-html.md @@ -4,7 +4,9 @@ Using `innerHTML` poses a potential security risk. Prefer using `textContent` to set text to an element. -https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9 +[Related security notification](https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9) + +It may be reasonable to disable this rule in testing setups that use known, trusted input and carry little security risk. 👎 Examples of **incorrect** code for this rule: