Skip to content

fix: use a browser compatible sanitizer#779

Merged
huyenltnguyen merged 1 commit into
freeCodeCamp:mainfrom
ojeytonwilliams:fix/dompurify
May 30, 2026
Merged

fix: use a browser compatible sanitizer#779
huyenltnguyen merged 1 commit into
freeCodeCamp:mainfrom
ojeytonwilliams:fix/dompurify

Conversation

@ojeytonwilliams
Copy link
Copy Markdown
Contributor

santize-html is intended to be used in a node environment. This means it can (and does) import thing like path, fs, and url.

While we do provide polyfills for the client, that's not ideal and it forces any other consumer to do the same. Also, this cuts the bundle size a fair bit.

Checklist:

santize-html is intended to be used in a node environment. This means it can (and does) import thing like path, fs, and url.

While we do provide polyfills for the client, that's not ideal and it forces any other consumer to do the same.
@ojeytonwilliams ojeytonwilliams requested a review from a team as a code owner May 28, 2026 19:36
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addeddompurify@​3.4.7981001009490

View full report

@huyenltnguyen huyenltnguyen merged commit b4d871f into freeCodeCamp:main May 30, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants