Sanitize whole HTML as DOM rather than string

merge-requests/2/head
gardenapple 3 years ago
parent 5db9f4bda7
commit 189ce4cd46
No known key found for this signature in database
GPG Key ID: CAF17E9ABE789268

@ -497,11 +497,10 @@ function onLoadDOMError(error) {
} }
function getHTML(window) { function getHTML(window) {
let outputHTML = window.document.documentElement.outerHTML;
if (!args["insane"]) { if (!args["insane"]) {
const createDOMPurify = require("dompurify"); const createDOMPurify = require("dompurify");
const DOMPurify = createDOMPurify(window); const DOMPurify = createDOMPurify(window);
outputHTML = DOMPurify.sanitize(outputHTML, {WHOLE_DOCUMENT: true}); outputHTML = DOMPurify.sanitize(window.document, {IN_PLACE: true, WHOLE_DOCUMENT: true});
} }
return outputHTML; return outputHTML;
} }

Loading…
Cancel
Save