7 ms·
OP here - I'm open to advice about how best to handle this! I'm currently just opening a new window and writing the HTML to it. What's the safest way to handle
by ValCanBuild 4y ago
OP here - I'm open to advice about how best to handle this! I'm currently just opening a new window and writing the HTML to it.
What's the safest way to handle this? Open it in an iframe?
- jve 4y agoJust look under this thread, I wrote one possible solution of using .innerText from constructed DOM. (Or maybe open window in another domain). However @repiret may be right - corporate proxy is already invasive enough, that means the users are already in mercy of those. But still, I'd go with safer practices. Even in the slightly unlikely case someone manages to hack 3rd party (Stripe) and send your users arbitrary HTML for some periods of time... :)
- ValCanBuild 4y agoThanks, appreciate the advice!