Remove HTML sanitizer
See original GitHub issuehttps://github.com/apostrophecms/sanitize-html#browser
It is meant to be used in node servers. Not browsers. It takes up a huge chunk of bundle as well.
As written in the repo, think, why do you need to sanitize HTML on client? That is the job of server. Besides I believe, we shouldn’t even be storing HTML in backend. It should store markup like markdown, not DOM (#2493). Most people are not using our rich descriptions feature and it is needlessly storing <p>
tags in DB without any reason
Trigger Reason: We need to allow polyfills of node dependencies like path in order to include it in the build - https://github.com/ef4/ember-auto-import/issues/224#issuecomment-503400386 As ember-auto-import now correctly removes node builtins being polyfilled
Edit: HTML-sanitizer has been relaced with dompurify
180 KB -> 16 KB
We still have to remove sanitization from frontend, its role of the backend
Issue Analytics
- State:
- Created 4 years ago
- Comments:7 (7 by maintainers)
I am not finding any instance of html-sanitizer in the project currently. Feel free to reopen if you find something. @pc-beast @progmatic-99
people have already called dibs on most the issues. i will still explore.