sanitize-html icon indicating copy to clipboard operation
sanitize-html copied to clipboard

Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance

Results 34 sanitize-html issues
Sort by recently updated
recently updated
newest added

## To Reproduce Step by step instructions to reproduce the behavior: ``` sanitizeHtml('&') // or sanitizeHtml('&nbsp') ``` ## Expected behavior Not to crash. ## Describe the bug When the html...

bug

## The problem to solve I'm trying to make sanitize-html to remove only harmful content, include the vast majority of the tags and attributes, but filter out possible harmful content....

enhancement
seeking contributions

A minor version update to sanitize-html included a major version update to htmlparser2, causing build issues with Typescript v4.2.4. Temporarily fixed by locking sanitize-html version at 4.2.0, but I wonder...

bug
seeking contributions

PLEASE NOTE: make sure the bug exists in the latest patch level of the project. For instance, if you are running a 2.x version of Apostrophe, you should use the...

bug

## To Reproduce Step by step instructions to reproduce the behavior: 1. Sanitize a string with a very large base64 encoded image url in the img element's src 2. Allow...

bug

parseStyleAttributes option from https://github.com/apostrophecms/sanitize-html/pull/596 is not present in 2.8.1 as noted in the [changelog](https://github.com/apostrophecms/sanitize-html/edit/main/CHANGELOG.md#L6) ## To Reproduce Step by step instructions to reproduce the behavior: > 1.install latest version 2.8.1...

bug

## To Reproduce Step by step instructions to reproduce the behavior: > 1. npm install > 2. npm run build ## Expected behavior > Clean build. ## Describe the bug...

bug

## The problem to solve I would like to add a restriction on the content of a tag. For example, only allow BR tags in P or LI elements ##...

enhancement
seeking contributions

sanitize-html not acknowledging allowedSchemes options ## To Reproduce Step-by-step instructions to reproduce the behavior: Use 2.13.1 version of sanitize-html Run below code ```javascript var sanitizeHtml = require("sanitize-html"); const ALLOWED_SCHEMES =...

question