Breaking News: Grepper is joining You.com. Read the official announcement!

sanitize-html

Add Answer

Sefa Korkmaz answered on October 11, 2022 Popularity 4/10 Helpfulness 1/10

answer sanitize-html

related What is HTML Sanitization

related chrome can't read PDF anymore

sanitize-html

Comment

import sanitizeHtml from 'sanitize-html';

const html = "<strong>hello world</strong>";
console.log(sanitizeHtml(html));
console.log(sanitizeHtml("<img src=x onerror=alert('img') />"));
console.log(sanitizeHtml("console.log('hello world')"));
console.log(sanitizeHtml("<script>alert('hello world')</script>"));

Popularity 4/10 Helpfulness 1/10 Language whatever

Source: www.npmjs.com

Tags: whatever

Link to this answer
Share Copy Link

Contributed on Sep 25 2024

Sefa Korkmaz

0 Answers Avg Quality 2/10

Closely Related Answers

What is HTML Sanitization

Comment

HTML Sanitization
Sometimes users need to author HTML. One scenario would be allow users to change the styling or structure of content inside a WYSIWYG editor. Output encoding here will prevent XSS, but it will break the intended functionality of the application. The styling will not be rendered. In these cases, HTML Sanitization should be used.

HTML Sanitization will strip dangerous HTML from a variable and return a safe string of HTML. OWASP recommends DOMPurify for HTML Sanitization.


let clean = DOMPurify.sanitize(dirty);
There are some further things to consider:

If you sanitize content and then modify it afterwards, you can easily void your security efforts.
If you sanitize content and then send it to a library for use, check that it doesn’t mutate that string somehow. Otherwise, again, your security efforts are void.
You must regularly patch DOMPurify or other HTML Sanitization libraries that you use. Browsers change functionality and bypasses are being discovered regularly.

Popularity 9/10 Helpfulness 2/10 Language html

Source: Grepper

Tags: html

Link to this answer
Share Copy Link

Contributed on Oct 11 2022

leethacker

0 Answers Avg Quality 2/10

chrome can't read PDF anymore

Comment

Reset your chrome settings
Yeah it sucks
But it works

Popularity 4/10 Helpfulness 1/10 Language whatever

Source: Grepper

Tags: pdf whatever

Link to this answer
Share Copy Link

Contributed on Sep 25 2024

Kaldrin

0 Answers Avg Quality 2/10

sanitize-html

Contents

More Related Answers

sanitize-html

Closely Related Answers

What is HTML Sanitization

chrome can't read PDF anymore

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.