Purify DOM lingforms

PrimalHQ · Sep 2, 2024 · 8ffc00a · 8ffc00a
1 parent 3e8bbe3
commit 8ffc00a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/components/PrimalMarkdown/MarkdownSlice.tsx b/src/components/PrimalMarkdown/MarkdownSlice.tsx
@@ -18,6 +18,7 @@ import { profileRegex } from '../../constants';
 import { PrimalArticle } from '../../types/primal';
 import { userName } from '../../stores/profile';
 import { npubToHex } from '../../lib/keys';
+import DOMPurify from 'dompurify';
 
 
 const MarkdownSlice: Component<{
@@ -168,7 +169,7 @@ const MarkdownSlice: Component<{
   })
 
   return (
-    <div innerHTML={html()}>
+    <div innerHTML={DOMPurify.sanitize(html())}>
     </div>
   )
 }