From 2a5cc91166669cb1bf62a858ded66416cfad3274 Mon Sep 17 00:00:00 2001 From: Mike Wasserman Date: Tue, 13 Oct 2026 22:45:29 -0700 Subject: [PATCH] Fix #summarizer-algorithm reference This should point to WRITING-ASSISTANCE-APIS --- index.bs | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/index.bs b/index.bs index edd5743..3dadc2f 100644 --- a/index.bs +++ b/index.bs @@ -813,5 +813,4 @@ Please see [[WRITING-ASSISTANCE-APIS#security]] for a discussion of security con The text returned by these APIs is generated by a model and must be treated as untrusted, whether the model runs locally or in the cloud. Because these models emit text, and text can contain HTML-significant characters or well-formed markup, the output can include markup even when the input was plain text; the model does not sanitize its output and is not a security boundary. An attacker who can influence the input (e.g., user-generated content that is being translated) can craft input that induces markup in the output. -Web developers should therefore not insert this output into a document as HTML (for example via {{Element/innerHTML}}, {{Element/insertAdjacentHTML()}}, or `document.write()`), nor otherwise interpret it as code, without first sanitizing it, e.g. using {{Element/setHTML()}} or by assigning it to {{Node/textContent}} where structure is not required. This complements the -input-side guidance against treating web-developer-provided context as instructions in each "the algorithm" section (for example, [[#summarizer-algorithm]]). +Web developers should therefore not insert this output into a document as HTML (for example via {{Element/innerHTML}}, {{Element/insertAdjacentHTML()}}, or `document.write()`), nor otherwise interpret it as code, without first sanitizing it, e.g. using {{Element/setHTML()}} or by assigning it to {{Node/textContent}} where structure is not required. This complements the input-side guidance against treating web-developer-provided context as instructions in each "the algorithm" section (for example, [[WRITING-ASSISTANCE-APIS#summarizer-algorithm]]).