Skip to content

sanitizeHtml

reference
1 min readUpdated

Kind: Function

Source: atloria-monorepo/apps/web/src/lib/sanitizeHtml.ts

Sanitize an HTML string before it is placed into the DOM via dangerouslySetInnerHTML. Strips

DOMPurify needs a DOM (window). The call sites that use this — the support agent chat console and the variant preview — render their content only after a client-side fetch, so there is nothing to sanitize during SSR; on the server (no window) we return '' and the browser fills in the sanitized markup on hydration. Use this at every innerHTML sink that renders content we did not author in code (AI output, stored doc content, marked() output, …).

Signature

ts
function sanitizeHtml(dirty: string | null | undefined): string

Parameters

NameType
dirty`string

Returns: string

Was this page helpful?

Download as PDF