From 78cc9b30bff8be8dfc3cb6e30e94fa374a25fb4c Mon Sep 17 00:00:00 2001 From: Mark Date: Wed, 9 Oct 2019 00:07:44 -0400 Subject: [PATCH] docs(readme): update FAQ that parser doesn't do HTML sanitization See #124 --- README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 52db4fa1..241860c7 100644 --- a/README.md +++ b/README.md @@ -160,9 +160,7 @@ const options = { if (!attribs) return; if (attribs.id === 'main') { - return ( -

{domToReact(children, options)}

- ); + return

{domToReact(children, options)}

; } if (attribs.class === 'prettify') { @@ -200,11 +198,15 @@ parse('


', { #### Is this library XSS safe? -No, this library does **_not_** sanitize against [XSS (Cross-Site Scripting)](https://wikipedia.org/wiki/Cross-site_scripting). See [#94](https://github.com/remarkablemark/html-react-parser/issues/94). +No, this library is **_not_** [XSS (Cross-Site Scripting)](https://wikipedia.org/wiki/Cross-site_scripting) safe. See [#94](https://github.com/remarkablemark/html-react-parser/issues/94). + +#### Does this library sanitize invalid HTML? + +No, this library does **_not_** perform HTML sanitization. See [#124](https://github.com/remarkablemark/html-react-parser/issues/124). #### Are `