Setup HTML sanitizing

Closes #28
ItsVipra · Jul 10, 2023 · 50cd509 · 50cd509
1 parent f449fa2
commit 50cd509
Show file tree

Hide file tree

Showing 3 changed files with 34 additions and 13 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -32,6 +32,7 @@
 		"sourceDir": "dist/"
 	},
 	"dependencies": {
+		"sanitize-html": "^2.11.0",
 		"webextension-polyfill": "^0.10.0"
 	}
 }
diff --git a/src/libs/pronouns.js b/src/libs/pronouns.js
@@ -1,3 +1,5 @@
+import sanitizeHtml from "sanitize-html";
+
 const fieldMatchers = [/pro.*nouns?/i, "pronomen"];
 
 /**
@@ -27,6 +29,9 @@ export function extractFromStatus(status) {
 			}
 		}
 	}
+	if (!pronouns) return null;
+	pronouns = sanitizeHtml(pronouns, { allowedTags: [], allowedAttributes: {} });
+
 	if (!pronouns) return null;
 	return pronouns;
 }