Function insertSafeHtml

src/patch-streaming-html.ts:14–20

Sanitize before every incremental DOM write during streaming

(
  parent: Element,
  position: InsertPosition,
  html: string,
)

/** Sanitize before every incremental DOM write during streaming */
function insertSafeHtml(
  parent: Element,
  position: InsertPosition,
  html: string,
): void {
  parent.insertAdjacentHTML(position, sanitizePatchFragment(html));
}

/** DOMPurify strips bare tr/td — wrap in table context first */
function sanitizePatchFragment(html: string): string {