Hacker News Reader

Nice! I was going to suggest the usage of Trusted Types API [0] to escape HTML [1], but support [2] for modern browsers is not there yet, specifically for HTML.

0: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Typ...

1: https://github.com/1Marc/todomvc-vanillajs-2022/blob/1c31309...

2: https://developer.mozilla.org/en-US/docs/Web/API/TrustedHTML...

View on HN

Cool! I'll look into the API and consider adding it to this implementation. Or happily would take a look at a PR for it.

Seriously- just do the innerHTML assignment on li.innerHTML omitting the title, followed up by a simple li.querySelector().textContent = todo.title.

How does this look? https://github.com/1Marc/todomvc-vanillajs-2022/commit/d38e5...

Reply on news.ycombinator.com