Run results for: dompurify vs native vs none

Run details:

User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Browser: Chrome 105

Operating system: Windows

Device Platform: Desktop

Date tested: one year ago

HTML Preparation code:

<script src="https://cdn.jsdelivr.net/gh/cure53/DOMPurify/dist/purify.js"></script>
<div id="foo">hello</div>

Script Preparation code:

window.testString = '<div id="hello">hello</div>';

Tests:

dompurify
document.getElementById("foo").innerHTML = DOMPurify.sanitize(window.testString);
native
document.getElementById("foo").setHTML(window.testString);
none
document.getElementById("foo").innerHTML = window.testString;