Sanitize whole HTML as DOM rather than string

3 years ago · 189ce4cd46
parent 5db9f4bda7
commit 189ce4cd46
1 changed files with 1 additions and 2 deletions
--- a/index.js
+++ b/index.js
@ -497,11 +497,10 @@ function onLoadDOMError(error) {
 }

 function getHTML(window) {
-	let outputHTML = window.document.documentElement.outerHTML;
 	if (!args["insane"]) {
 		const createDOMPurify = require("dompurify");
 		const DOMPurify = createDOMPurify(window);
-		outputHTML = DOMPurify.sanitize(outputHTML, {WHOLE_DOCUMENT: true});
+		outputHTML = DOMPurify.sanitize(window.document, {IN_PLACE: true, WHOLE_DOCUMENT: true});
 	}
 	return outputHTML;
 }