JavaScript · DOM and events

textContent

Reads or writes text safely. The browser escapes it, so it cannot inject markup.

javascriptRunnable example javascript course

Syntax

el.textContent = "…"

Example

Try it

const el = document.createElement("p");
el.textContent = "<strong>Not bold</strong>";
console.log(el.textContent);

Prefer textContent over innerHTML for any value that came from a user.

Reference pages are the quick answer. The course explains the why, shows the full example and ends with a challenge.