(config: Config)
| 23 | * Configure default sanitization for all StreamHtml renders. |
| 24 | */ |
| 25 | export function configureSanitizer(config: Config): void { |
| 26 | const baseAddAttr = Array.isArray(DEFAULT_CONFIG.ADD_ATTR) |
| 27 | ? DEFAULT_CONFIG.ADD_ATTR |
| 28 | : undefined; |
| 29 | const extraAddAttr = Array.isArray(config.ADD_ATTR) |
| 30 | ? config.ADD_ATTR |
| 31 | : undefined; |
| 32 | const baseAddTags = Array.isArray(DEFAULT_CONFIG.ADD_TAGS) |
| 33 | ? DEFAULT_CONFIG.ADD_TAGS |
| 34 | : undefined; |
| 35 | const extraAddTags = Array.isArray(config.ADD_TAGS) |
| 36 | ? config.ADD_TAGS |
| 37 | : undefined; |
| 38 | |
| 39 | globalConfig = { |
| 40 | ...DEFAULT_CONFIG, |
| 41 | ...config, |
| 42 | ADD_ATTR: mergeStringLists(baseAddAttr, extraAddAttr), |
| 43 | ADD_TAGS: mergeStringLists(baseAddTags, extraAddTags), |
| 44 | }; |
| 45 | } |
| 46 | |
| 47 | /** |
| 48 | * Sanitize HTML for safe rendering. Uses DOMPurify with secure defaults. |
no test coverage detected