Note that there are some explanatory texts on larger screens.

plurals
  1. POWhat for to use document.implementation.createHTMLDocument?
    primarykey
    data
    text
    <p>What are some use cases and whether it is deprecated? As I found out at <a href="http://groups.google.com/group/envjs/browse_thread/thread/6c22d0f959666009/c389fc11537f2a97" rel="noreferrer">http://groups.google.com/group/envjs/browse_thread/thread/6c22d0f959666009/c389fc11537f2a97</a> that it's "non-standard and not supported by any modern browser"...</p> <p><strong>EDIT:</strong></p> <p>About <code>document.implementation</code> at <a href="http://javascript.gakaa.com/document-implementation.aspx" rel="noreferrer">http://javascript.gakaa.com/document-implementation.aspx</a>:</p> <blockquote> <p>Returns a reference to the W3C DOMImplementation object, which represents, to a limited degree, the environment that makes up the document containerthe browser, for our purposes. Methods of the object let you see which DOM modules the browser reports supporting. This object is also a gateway to creating virtual W3C Document and DocumentType objects outside of the current document tree. Thus, in Netscape 6 you can use the document.implementation property as a start to generating a nonrendered document for external XML documents. See the DOMImplementation object for details about the methods and their browser support.</p> </blockquote> <p>Given that it provides methods (such as <code>createHTMLDocument</code>) for creating a nonrendered document outside of the current document tree, would it be safe to feed it untrusted third party HTML input that may contain some XSS? I ask because I would like to use <code>createHTMLDocument</code> for traversal purposes of third party HTML input. May that be one of the use cases?</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload