The article discusses the setHTML() method of the Element interface, which provides a way to safely parse and sanitize HTML strings before inserting them into the DOM. This method removes any XSS-unsafe elements and attributes, making it a recommended replacement for Element.innerHTML when handling untrusted content. It also highlights the importance of using a sanitizer configuration to define allowed elements and attributes.
xss ✓
html ✓
dom ✓