We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent d7339af commit 1dae00cCopy full SHA for 1dae00c
README.md
@@ -83,3 +83,13 @@ Attr{
83
"onClick": "javascriptFunc()",
84
}
85
```
86
+
87
+#### func `UnsafeContent`
88
89
+This will bypass HTML sanitization and allow for direct injecting
90
+```golang
91
92
+injection := "<script>alert('xss')</script>"
93
+root := H("div", UnsafeContent(injection))
94
+// <script>alert('xss')</script>
95
+```
0 commit comments