Hello webkit-dev,

I'd like to request a position statement on the proposed Sanitizer API.

The Sanitizer API wants to build an HTML Sanitizer right into the web platform. The goal is to make it easier to build XSS-free web applications. The intended contributions of the Sanitizer API are: Making a sanitizer more easily accessible to web developers; be easy to use and safe by default; and shift part of the maintenance burden to the platform.

Currently available are an explainer and an early spec draft, and early prototype implementations in Chromium & Firefox, behind flags.

Thank you for your consideration!
Daniel