commit 21ce7bcad1deeb080c98f7abb679cbcb9cd17842 parent 665dc52fe89a3052eaa8bde2e5f0a6a9ae28706b Author: ASWANTH R <aswanthr82@gmail.com> Date: Mon, 19 Oct 2026 17:25:43 +0530 Add security note for XSS protection in README Added a security note regarding XSS protection and input sanitization. Diffstat:
| M | README.md | | | 4 | ++++ |
1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/README.md b/README.md @@ -148,3 +148,7 @@ Pytml is open-source under the Apache 2.0 License. ## Support **If you find Pytml useful, consider giving it a star on GitHub!** + +## Security Note: +Pytml defaults to using element.text, which uses the browser's textContent API. This means it is 100% secure against Cross-Site Scripting (XSS) attacks. +If you must use element.html to render raw HTML, never pass untrusted user input directly into it. Use the built-in pytml.escape() helper to sanitize the input first.