Update no-inner-html.md · github/eslint-plugin-github@aadb4ce (original) (raw)

Original file line number Diff line number Diff line change
@@ -8,7 +8,9 @@
8 8
9 9 Using `innerHTML` poses a potential security risk. Prefer using `textContent` to set text to an element.
10 10
11 -https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9
11 +[Related security notification](https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9)
12 +
13 +It may be reasonable to disable this rule in testing setups that use known, trusted input and carry little security risk.
12 14
13 15 👎 Examples of **incorrect** code for this rule:
14 16