Sanitizer APILimited availability

The Sanitizer API customizes the sanitization of HTML parsed and inserted into the DOM in a way that can prevent cross-site scripting attacks. You can use it with DOM APIs that accept a sanitizer option, such as parseHTML() or setHTML().

Not yet supported in all major browsers — check the table and provide a fallback.

How to use ↓Compare browsers

Browser support

DesktopChrome

1–145Not supported

146+Supportedsince Mar 10, 2026

Current: 155

Edge

12–145Not supported

146+Supportedsince Mar 13, 2026

Current: 154

Firefox

1–147Not supported

148+Supportedsince Feb 24, 2026

Current: 157

Safari

✕Not supportedup to 27

Current: 27

MobileChrome Android

18–145Not supported

146+Supportedsince Mar 10, 2026

Current: 155

Firefox Android

4–147Not supported

148+Supportedsince Feb 24, 2026

Current: 157

Safari iOS

✕Not supportedup to 27

Current: 27

How to use

Not supported in Safari, Safari iOS. Use feature detection below and provide a fallback (or a polyfill) for those browsers.

Example

Full syntax and examples are on MDN: parseHTML static.

Feature detection

JS · check before using

if ("Sanitizer" in globalThis) {
  // Sanitizer is available
} else {
  // load a polyfill or use a fallback
}

Documentation (MDN)

Specification

html.spec.whatwg.org#html-sanitization ↗

Sub-features

Support for each part of the feature (14). The overall table above shows when the whole feature works.

Sub-feature	Chrome	Edge	Firefox	Safari	Chrome Android	Firefox Android	Safari iOS
Document.parseHTML_static	146	146	148	✕	146	148	✕
Element.setHTML	146	146	148	✕	146	148	✕
Sanitizer	146	146	148	✕	146	148	✕
Sanitizer.Sanitizer	146	146	148	✕	146	148	✕
Sanitizer.allowAttribute	146	146	148	✕	146	148	✕
Sanitizer.allowElement	146	146	148	✕	146	148	✕
Sanitizer.get	146	146	148	✕	146	148	✕
Sanitizer.removeAttribute	146	146	148	✕	146	148	✕
Sanitizer.removeElement	146	146	148	✕	146	148	✕
Sanitizer.removeUnsafe	146	146	148	✕	146	148	✕
Sanitizer.replaceElementWithChildren	146	146	148	✕	146	148	✕
Sanitizer.setComments	146	146	148	✕	146	148	✕
Sanitizer.setDataAttributes	146	146	148	✕	146	148	✕
ShadowRoot.setHTML	146	146	148	✕	146	148	✕