From 2de6f702a2d7670df5234d9542479320112329e0 Mon Sep 17 00:00:00 2001 From: arsam Date: Fri, 18 Sep 2026 23:19:38 +0330 Subject: [PATCH] Import source: app/backend/src/lib/sanitize Import the existing local project snapshot. This commit organizes existing files; it does not represent newly developed functionality. --- app/backend/src/lib/sanitize.ts | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 app/backend/src/lib/sanitize.ts diff --git a/app/backend/src/lib/sanitize.ts b/app/backend/src/lib/sanitize.ts new file mode 100644 index 0000000..fdb3765 --- /dev/null +++ b/app/backend/src/lib/sanitize.ts @@ -0,0 +1,18 @@ +import sanitizeHtml from 'sanitize-html'; + +const COMMENT_OPTIONS: sanitizeHtml.IOptions = { + allowedTags: ['b', 'i', 'em', 'strong', 'a', 'code', 'br'], + allowedAttributes: { + a: ['href', 'title'], + }, + allowedSchemes: ['https'], + disallowedTagsMode: 'discard', +}; + +export function sanitizeComment(input: string): string { + return sanitizeHtml(input, COMMENT_OPTIONS); +} + +export function stripHtml(input: string): string { + return sanitizeHtml(input, { allowedTags: [], allowedAttributes: {} }); +}