Sanitizes an HTML string for safe rendering (e.g. via v-html): strips scripts, event-handler
attributes (onclick, ...), javascript: URLs and everything else outside the allowlist.
Returns an empty string for empty/nullish input, and - failing closed - when no DOM is available
(e.g. SSR), since DOMPurify would otherwise hand back the input unsanitized.
Generalizes the inline DOMPurify.sanitize call in luv-autoq-frontend's
MailLogItemMailContentButton.vue, which maps to
{ allowedAttributes: ["style", "href", "class"] } with the default tags.
Sanitizes an HTML string for safe rendering (e.g. via
v-html): strips scripts, event-handler attributes (onclick, ...),javascript:URLs and everything else outside the allowlist. Returns an empty string for empty/nullish input, and - failing closed - when no DOM is available (e.g. SSR), since DOMPurify would otherwise hand back the input unsanitized.Generalizes the inline
DOMPurify.sanitizecall inluv-autoq-frontend'sMailLogItemMailContentButton.vue, which maps to{ allowedAttributes: ["style", "href", "class"] }with the default tags.