Skip to content

Commit e9c1730

Browse files
committed
docs: move @html tag to later section
1 parent 288c986 commit e9c1730

File tree

7 files changed

+1
-1
lines changed

7 files changed

+1
-1
lines changed

content/tutorial/01-svelte/01-introduction/06-html-tags/README.md renamed to content/tutorial/03-advanced-svelte/11-special-tags/02-html-tags/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,4 +12,4 @@ In Svelte, you do this with the special `{@html ...}` tag:
1212
<p>{+++@html+++ string}</p>
1313
```
1414

15-
> Svelte doesn't perform any sanitization of the expression inside `{@html ...}` before it gets inserted into the DOM. In other words, if you use this feature it's critical that you manually escape HTML that comes from sources you don't trust, otherwise you risk exposing your users to <a href="https://owasp.org/www-community/attacks/xss/" target="_blank">Cross-Site Scripting</a> (XSS) attacks.
15+
> **Warning!** Svelte doesn't perform any sanitization of the expression inside `{@html ...}` before it gets inserted into the DOM. In other words, if you use this feature it's critical that you manually escape HTML that comes from sources you don't trust, otherwise you risk exposing your users to <a href="https://owasp.org/www-community/attacks/xss/" target="_blank">Cross-Site Scripting</a> (XSS) attacks.

0 commit comments

Comments
 (0)