67 lines
1.5 KiB
TypeScript
67 lines
1.5 KiB
TypeScript
export function getDefaultSanitizeOptions () {
|
|
return {
|
|
allowedTags: [ 'a', 'p', 'span', 'br', 'strong', 'em', 'ul', 'ol', 'li' ],
|
|
allowedSchemes: [ 'http', 'https' ],
|
|
allowedAttributes: {
|
|
'a': [ 'href', 'class', 'target', 'rel' ],
|
|
'*': [ 'data-*' ]
|
|
},
|
|
transformTags: {
|
|
a: (tagName: string, attribs: any) => {
|
|
let rel = 'noopener noreferrer'
|
|
if (attribs.rel === 'me') rel += ' me'
|
|
|
|
return {
|
|
tagName,
|
|
attribs: Object.assign(attribs, {
|
|
target: '_blank',
|
|
rel
|
|
})
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
export function getTextOnlySanitizeOptions () {
|
|
return {
|
|
allowedTags: [] as string[]
|
|
}
|
|
}
|
|
|
|
export function getCustomMarkupSanitizeOptions (additionalAllowedTags: string[] = []) {
|
|
const base = getDefaultSanitizeOptions()
|
|
|
|
return {
|
|
allowedTags: [
|
|
...base.allowedTags,
|
|
...additionalAllowedTags,
|
|
'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'img'
|
|
],
|
|
allowedSchemes: base.allowedSchemes,
|
|
allowedAttributes: {
|
|
...base.allowedAttributes,
|
|
|
|
'img': [ 'src', 'alt' ],
|
|
'*': [ 'data-*', 'style' ]
|
|
}
|
|
}
|
|
}
|
|
|
|
// Thanks: https://stackoverflow.com/a/12034334
|
|
export function escapeHTML (stringParam: string) {
|
|
if (!stringParam) return ''
|
|
|
|
const entityMap = {
|
|
'&': '&',
|
|
'<': '<',
|
|
'>': '>',
|
|
'"': '"',
|
|
'\'': ''',
|
|
'/': '/',
|
|
'`': '`',
|
|
'=': '='
|
|
}
|
|
|
|
return String(stringParam).replace(/[&<>"'`=/]/g, s => entityMap[s])
|
|
}
|