PowerBI Custom Viz Certification : Usage of innerHTML

Hi AnatolePIVETEAU,

It's completely forbidden. The linting checks run as part of the certification process will detect its use and report it as an issue that needs to be resolved. You'll then need to fix this and resubmit a valid approach for the visual to pass certification.

If you want to add specific HTML to the DOM, you'll need to guarantee that you're adding a valid Node rather than text-based content. Even if it doesn't contain user input, your code may try to do something technically invalid that causes rendering issues - even if you are well-intentioned - and this won't get caught until execution time.

I've personally handled it in one of my visuals (which does allow arbitrary content) by using a package like sanitize-html, running my desired output through this to get a valid Node as output, and using a suitable manipulation method on the desired anchor node. This visual is certified and is regularly updated, so this approach will still work under the certification rules. Another company I work with writes their own in-house sanitization library and this also passes certification (but it essentially does the same thing as sanitize-html).

If you want to have a look at how I'm doing it, my certified visual - HTML Content (lite) - is open source and you're welcome to crib anything you learn from that. The specific part of the visual that handles it begins here.

Good luck with certification!

Daniel