Improve 'prevent-innerHTML' — support 'setHTMLUnsafe' and 'setHTML' methods

[piquark6046]

The prevent-innerHTML scriptlet currently only covers innerHTML setter.

It should also cover the newer Element.setHTMLUnsafe() and Element.setHTML() methods, which can be used as alternatives to innerHTML.

References:
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTMLUnsafe
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTML

[slvvko]

@piquark6046 any examples of how it can be used in filter lists?

[piquark6046]

any examples of how it can be used in filter lists?

As far as I know, no. But, Firefox web browser supports them and Chromium will support soon.

[Yuki2718]

https://hacks.mozilla.org/2026/02/goodbye-innerhtml-hello-sethtml-stronger-xss-protection-in-firefox-148/