@squiz/xaccel-xss-safe-content

xss-safe-content

This package provides a React component that will escape dangerous HTML allowing WYSIWYG content to be safely used without possible XSS vulnerability injection vectors being added.

The component takes two defined props and spreads the others as HTML Attributes.

The two defined props are:

• content - The html content as a string
• elementType (optional) - as a string or a react functional component

The remaining props are expected to be HTML Elements properties or Class Attributes.

Usage:

import { XssSafeContent } from '@squiz/xaccel-xss-safe-content';

function SomeReactComponent({ content }) {
    return <XSSSafeContent content={content} elementType={'div'} />;
}