Fix #489

cure53 · cure53 · commit 89fee39043d1 · 2020-11-19T08:07:10.000+01:00
docs: Removed a deprecated XSS-risk note
diff --git a/.settings/.gitignore b/.settings/.gitignore
@@ -0,0 +1,5 @@
+/.jsdtscope
+/org.eclipse.ltk.core.refactoring.prefs
+/org.eclipse.wst.common.project.facet.core.xml
+/org.eclipse.wst.jsdt.ui.superType.container
+/org.eclipse.wst.jsdt.ui.superType.name
diff --git a/README.md b/README.md
@@ -230,7 +230,7 @@ var clean = DOMPurify.sanitize(dirty, {WHOLE_DOCUMENT: true});
 // disable DOM Clobbering protection on output (default is true, handle with care, minor XSS risks here)
 var clean = DOMPurify.sanitize(dirty, {SANITIZE_DOM: false});
 
-// keep an element's content when the element is removed (default is true, careful, minor XSS risks here)
+// keep an element's content when the element is removed (default is true)
 var clean = DOMPurify.sanitize(dirty, {KEEP_CONTENT: false});
 
 // glue elements like style, script or others to document.body and prevent unintuitive browser behavior in several edge-cases (default is false)
