Web features explorer - Sanitizer API

Web features explorer

The Document.parseHTML() static method and the setHTML() method of Element and ShadowRoot objects parse and insert HTML into the DOM in a way that can prevent cross-site scripting attacks. The Sanitizer API can customize the sanitization process.

Browser support

Chrome Not supported Bugs: 40138584 1428276 1101982
Chrome Android Not supported
Edge Not supported
Firefox 148 Released on 2026-02-24
Firefox for Android 148 Released on 2026-02-24
Safari Not supported
Safari on iOS Not supported

Need this feature?
Leave a 👍 on the feedback issue
Don't forget to also leave a comment explaining your specific use case.

MDN documentation

HTML Sanitizer API

Specifications

HTML (#html-sanitization), from HTML Workstream (WHATWG).

Web Platform Tests (WPT)

View the latest WPT test results for this feature

View as JSON | Edit this feature | Report an issue | Web-features entry: source, dist