DOMPurify.sanitize is not a function

[akashgp09]

Background & Context

I am using DOMPurify in my react App

Bug

DOMPurify.sanitize is not a function

Input

import DOMPurify from "dompurify";

const dirty = `I love to do evil <img src="http://unsplash.it/100/100?random" onload="alert('you got hacked');" />`;

const App = () => (
  <div
    dangerouslySetInnerHTML={{
      __html: DOMPurify.sanitize(dirty)
    }}
  />
);

Given output

DOMpurify.sanitize is not a function

Expected output

Should execute well

[cure53]

Not our bug, me thinks.

[binyamin]

@cure53 same problem here. Do you have any idea who's bug it is?

[binyamin]

Ah, maybe it needs jsdom? The readme doesn't seem to say that in node.js, you need jsdom to work

[Fensterbank]

I had this issue with NextJS on server-side rendering.
To make this work server-side and client-side the same way, you can use the wrapper https://github.com/kkomelin/isomorphic-dompurify

[cyocun]

I was into the same problem.

the solution is
❌ import * as DOMPurify from 'dompurify';
⭕️ import DOMPurify from 'dompurify';

[duoluodexiaoxiaoyuan]

Background & Context

I am using DOMPurify in my react App

Bug

DOMPurify.sanitize is not a function

Input

import DOMPurify from "dompurify";

const dirty = `I love to do evil <img src="http://unsplash.it/100/100?random" onload="alert('you got hacked');" />`;

const App = () => (
  <div
    dangerouslySetInnerHTML={{
      __html: DOMPurify.sanitize(dirty)
    }}
  />
);

Given output

DOMpurify.sanitize is not a function

Expected output

Should execute well

i find a answer, this is a demo https://codesandbox.io/s/ei98d?file=/src/App.tsx

[bonface221]

🤔

[mtoha2013]

I have similar issue, how to achieve this at pure javascript no framework like react?
I run it on .NET MVC app

[Bunpasi]

I had the same problem. Check DOMPurify.isSupported. For me it wasn't supported, because my application didn't have a global window object.

[MortenHofft]

What threw me off is this example from the docs

import * as DOMPurify from 'dompurify';
const clean = DOMPurify.sanitize('<b>hello there</b>');

which doesn't work, but this does

import DOMPurify from 'dompurify';
const clean = DOMPurify.sanitize('<b>hello there</b>');