Run results for: dompurify vs native vs none

Run details:

User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36

Browser: Chrome 143

Operating system: Mac OS X 10.15.7

Device Platform: Desktop

Date tested: 3 months ago

HTML Preparation code:

<script src="https://cdn.jsdelivr.net/gh/cure53/DOMPurify/dist/purify.js"></script>
<div id="foo">hello</div>

Script Preparation code:

window.testString = '<div id="hello">hello</div>';

Tests:

dompurify
document.getElementById("foo").innerHTML = DOMPurify.sanitize(window.testString);
native
document.getElementById("foo").setHTML(window.testString);
none
document.getElementById("foo").innerHTML = window.testString;