kkmuffme

@ashtul given https://github.com/RediSearch/RediSearch/pull/2886, is this issue fixed now in 2.6.0?

Thanks for your feedback. I know it's a bit too early, it's more like something I wanted to put on the roadmap. The required change is minimal and done quickly...

@mgol >The possibility of the sanitizer adding more elements to the blocklist sounds risky: it may break some apps and browsers try to avoid breaking changes. The sanitize API is...

I think worrying about performance at the current time isn't really relevant - the native sanitizers will get faster over the next few months (the test I ran is not...

Just some thoughs on how to improve performance too in case it turns out this really is an issue: jQuery could internally handle trusted types via an internal `trustedTypes.createPolicy` (which...

I totally agree with you - my comment was in regards on the impact on performance (and I was wrong about .text() of course), as LifeIsStrange said this might be...

>So, if I understand correctly, we'd just have to make sure that any PR that introduces setHTML continues to use innerHTML for TrustedHTML-like values. Yes. Additionally: anything that is from...

@koto @mgol with Chrome 105 (first Chrome with official support for setHTML) the benchmark already is twice as fast as the benchmark from a few weeks ago with Firefox: https://www.measurethat.net/Benchmarks/ShowResult/331515...

Yes please :-)

No, I think he means it's a bug, because it was forgotten to consider `exported` when this rule was created