title: V-html only use for text, is it safe?
body: <p>I now that in the <a href="https://v2.vuejs.org/v2/guide/syntax.html#Raw-HTML" rel="nofollow noreferrer">Vue Documenteation about Raw HTML</a> state that we can use <code>v-html</code> to render some inner html. I admit that this is the legal and most simple trick to do but since I'm quite the worrywart I can't stop thinking if I can use it safely in web project. let say I use this <code>v-html</code> only for render some html tag such as <code>br</code>, <code>span</code>, etc.</p>
  <p>but in the documentation they state clearly like this:</p>
  <blockquote>
  <p>Dynamically rendering arbitrary HTML on your website can be very
  dangerous because it can easily lead to <strong>XSS vulnerabilities</strong>. Only use
  HTML interpolation on trusted content and never on user-provided
  content.</p>
  </blockquote>
  <p>if I use <code>v-html</code> only for text rendering in vue component such as this code and without <code>input</code> tag, is it safe for <code>XSS Vulnerabilities</code> attack or <code>Cross-site Scripting</code>:</p>
  <pre><code>&lt;template&gt;
   &lt;div&gt;
    &lt;h2 v-html=&quot;header&quot; /&gt;
    &lt;h2 class=&quot;bold&quot; v-html=&quot;bHeader&quot; /&gt;
    &lt;h2 class=&quot;italic&quot; v-html=&quot;iHeader&quot; /&gt;
    &lt;h2 class=&quot;text-muted&quot; v-html=&quot;mHeader&quot; /&gt;
   &lt;/div&gt;
  &lt;/template&gt;
  </code></pre>
  <p>Can someone help me ? I'm quite confused about this, in fact I only use this <code>v-html</code> only for text tag such as <code>h1</code>, <code>h2</code>, <code>h3</code>, etc.</p>