JSFiddle - React, Tailwind, and code Playground

by Renilson Meneguci

HTML

<!DOCTYPE html>
<body>
    <div id="target"></div>
    <div id="target1"></div>
</body>

JavaScript

var div = document.createElement('div');
div.innerHTML = 
  'Hello <a>&lt;img src="herp://" onerror="alert(\'!\')"&gt;</a>!';
var stripped = div.textContent;
var target = document.getElementById('target');
target.innerHTML = stripped;

var target = document.getElementById('target1');
var s = "<listing>&lt;img src=1 onerror=alert(1)&gt;</listing>";
var parser = new DOMParser();
var doc = parser.parseFromString( s, "text/html" );
target.innerHTML = doc.body.innerHTML;