Skip to main content

Html Sanitization

IDsanitize-html
Version2.11.0
Sourcemodules/sanitize-html

Used by​

Documentation​

HTML Sanitization​

This module adds sanitization abilities to the xOpat. Configuration (of plugins) could contain HTML inputs, this module lets you sanitize the configuration contents.

Usage (see https://github.com/apostrophecms/sanitize-html):

const clean = SanitizeHtml(dirty, {
allowedTags: [ 'b', 'i', 'em', 'strong', 'a' ],
allowedAttributes: {
'a': [ 'href' ]
},
allowedIframeHostnames: ['www.youtube.com']
});

The source is built with browserify and minify from a single js script that you have to create in the root directory. browserify is not a repository dependency — this is a one-off re-vendor step, so invoke it with npx:

browser.js

window.SanitizeHtml = require('./index.js');

And call

npx browserify browser.js > sanitize.js