🥮 mooncakes.io
    Sign in

    dom_sanitizer

    Download zip
    Version
    0.1.0
    License
    Apache-2.0
    Last updated
    6 months ago
    Downloads
    43

    No dependencies

    #moonbit-community/dom_sanitizer

    A JS-target HTML sanitizer that delegates to DOMPurify.

    When the JS runtime does not provide a DOM-capable window, the package falls back to jsdom.

    ///|
    test {
      let safe = @dom_sanitizer.sanitize(
        "<p onclick=\"alert(1)\">hi<script>alert(1)</script></p>",
      )
      inspect(safe, content="<p>hi</p>")
    }

    ///|
    test {
      let config = { ..@dom_sanitizer.Config::default(), safe_for_templates: true }
      let safe = @dom_sanitizer.sanitize("<p>{{ user }}</p>", config~)
      inspect(safe, content="<p> </p>")
    }

    Config

    source
    pub(all) struct Config {
      allowed_tags : Array[String]?
      allowed_attr : Array[String]?
      allowed_namespaces : Array[String]?
      add_tags : Array[String]?
      add_tag_check : (String) -> Bool?
      add_attr : Array[String]?
      add_attr_check : (String, String) -> Bool?
      add_data_uri_tags : Array[String]?
      add_uri_safe_attr : Array[String]?
      allow_aria_attr : Bool
      allow_data_attr : Bool
      allow_unknown_protocols : Bool
      allow_self_close_in_attr : Bool
      forbid_tags : Array[String]?
      forbid_attr : Array[String]?
      forbid_contents : Array[String]?
      add_forbid_contents : Array[String]?
      force_body : Bool
      keep_content : Bool
      namespace_uri : String
      parser_media_type : String
      safe_for_templates : Bool
      safe_for_xml : Bool
      sanitize_dom : Bool
      sanitize_named_props : Bool
      whole_document : Bool
      use_profiles : UseProfilesConfig?
      custom_element_handling : CustomElementHandling?
      allowed_uri_check : (String) -> Bool?
      html_integration_points : Array[String]?
      mathml_text_integration_points : Array[String]?
    }

    Configuration for sanitize.

    Config::default

    source
    fn Config::default() -> Config

    CustomElementHandling

    source
    pub(all) struct CustomElementHandling {
      tag_name_check : (String) -> Bool?
      attribute_name_check : (String, String) -> Bool?
      allow_customized_built_in_elements : Bool
    }

    Custom element handling options.

    CustomElementHandling::default

    source

    UseProfilesConfig

    source
    pub(all) struct UseProfilesConfig {
      html : Bool
      svg : Bool
      svg_filters : Bool
      math_ml : Bool
    }

    Element profile switches modeled after DOMPurify USE_PROFILES.

    UseProfilesConfig::default

    source

    namespace_html

    source
    let namespace_html : String

    HTML namespace constant used by Config::namespace.

    namespace_mathml

    source
    let namespace_mathml : String

    MathML namespace constant used by Config::namespace.

    namespace_svg

    source
    let namespace_svg : String

    SVG namespace constant used by Config::namespace.

    parser_media_type_html

    source
    let parser_media_type_html : String

    Default HTML parser media type.

    parser_media_type_xhtml

    source
    let parser_media_type_xhtml : String

    XHTML parser media type.

    sanitize

    source
    fn sanitize(input : String, config? : Config) -> String

    Sanitize a dirty HTML string and return a safe HTML string.

    This implementation delegates to DOMPurify and is limited to string input/output on the JS target.

    Source Files

    Powered by MoonBit

    Site sourceReport issuePackagesBuild queueSkillsStatistics

    © 2026 mooncakes.io