Skip to content
This repository was archived by the owner on Dec 3, 2025. It is now read-only.

Label now uses 'textContent' instead of 'innerHTML'

Choose a tag to compare

@cloud1ess cloud1ess released this 10 Mar 11:05
· 163 commits to master since this release

This change could break some uses of Label.

If you have special characters or HTML elements in your Label contents then they will no longer work (it will render them as plain text). This is to plug a security hole where by malicious code could be injected into a TAL label and executed.

Note: There is an alternate function on Label called 'unsafeSetHTMLText', this will apply the Label contents using 'innerHTML' (equivalent to Label.setText previously).