Function sanitizePatchFragment

src/patch-streaming-html.ts:23–37

DOMPurify strips bare tr/td — wrap in table context first

(html: string)

/** DOMPurify strips bare tr/td — wrap in table context first */
function sanitizePatchFragment(html: string): string {
  if (!html || !/<\/?t[dhbr]/i.test(html)) {
    return sanitizeHtml(html);
  }

  const section = /<th\b/i.test(html) ? "thead" : "tbody";
  const wrapped = `<table><${section}>${html}</${section}></table>`;
  const clean = sanitizeHtml(wrapped);
  const re = new RegExp(
    `<table><${section}>([\\s\\S]*)</${section}></table>`,
    "i",
  );
  const match = clean.match(re);
  return match?.[1]?.trim() ? match[1]! : sanitizeHtml(html);
}
const TR_RE = /<tr[^>]*>[\s\S]*?<\/tr>/gi;
const CELL_RE = /<t[hd]\b/i;