Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Sanitize supports only one tag

See original GitHub issue

Whether it was made intentionally or not, src/sanitize.js supports only one <em> tag. Are you planning to add some more important tags ( i.e <script>) or better yet let a developer himself to pass a Regex as an argument?

Issue Analytics

State:
Created 5 years ago
Reactions:1
Comments:6 (4 by maintainers)

Top GitHub Comments

1reaction

dmitry-korolevcommented, Jun 18, 2018

@Tom910 we really need the third opinion =)

0reactions

osorokotyagacommented, Aug 15, 2018

We already have string/escape, and building another sanitize tool will be overkill to library purpose, so I’ll better remove it at all.

Top Results From Across the Web

Allow all except certain tags · Issue #89 - GitHub

I can't see an easy way to strip out only script elements, for example, without making a huge array of every other element...

Rails sanitize remove default allowed tags - Stack Overflow

Yes you can specify which tags and attributes to allow on a per-call basis. From the fine manual: Custom Use (only the mentioned...

HTML Sanitizer API - MDN Web Docs

The HTML Sanitizer API allow developers to take untrusted strings of HTML and Document or DocumentFragment objects, and sanitize them for ...

Sanitize HTML | Get started - Plant An App

This action recieves HTML input and repairs broken HTML tag syntax, removes specifed HTML tags and attributes, sets the "rel" attribute to "nofollow"...

Sanitize-html-x NPM

Allowing particular urls as a src to an iframe tag by filtering hostnames is also supported. HTML comments are not preserved.