Web platform features explorer

The Document.parseHTML() static method and the setHTML() method of Element and ShadowRoot objects parse and insert HTML into the DOM in a way that can prevent cross-site scripting attacks. The Sanitizer API can customize the sanitization process.

Status

Limited availability

MDN documentation

HTML Sanitizer API

Specifications

HTML Sanitizer API, from Web Platform Incubator Community Group (W3C).

Browser support

Chrome ❌ See issues.chromium.org/issues/40138584 crbug.com/1428276 crbug.com/1101982
Chrome Android ❌
Edge ❌
Firefox ❌
Firefox for Android ❌
Safari ❌
Safari on iOS ❌

Web Platform Tests (WPT)

View the latest WPT test results for this feature

Developer votes

👍
54

Do you need this feature?
Let us know by leaving a 👍 reaction on the feedback issue. Don't forget to also leave a comment explaining your specific use case.