Security News
tea.xyz Spam Plagues npm and RubyGems Package Registries
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
svelte-purify
Advanced tools
Readme
💎 Safe html expansion for Svelte with DOMPurify
npm i svelte-purify
See DOMPurify
for detailed settings.
<script>
import { Render } from 'svelte-purify'
const code = '<h1>Hello World</h1>'
</script>
<Render html={code} config={/* DOMPurify Config */} />
<!-- Equivalent to {@html code} -->
Render
uses DOMPurify internally and only works in the browser or at Node runtime.
There are 3 options for use in non-node environments such as the edge.
svelte-sanitize
Enables the use of html rendering in non-node environments at the expense of detailed compatibility.
Please check the link for details.
<script>
import { Render } from 'svelte-sanitize'
</script>
<Render html={/* ... */} />
In this case, html is not rendered on the server.
<script>
import { Render } from 'svelte-purify/browser-only'
</script>
<Render html={/* ... */} />
Conditional Exports is not yet fully supported, so 2.
may not work.
Sacrificing bundle size avoids this problem.
npm i dompurify
<script>
import { browser } from '$app/environment'
import DOMPurify from 'dompurify'
</script>
{@html browser ? DOMPurify.sanitize(/* ... */) : 'server-fallback-value'}
FAQs
💎 Safe html expansion for Svelte with DOMPurify
The npm package svelte-purify receives a total of 193 weekly downloads. As such, svelte-purify popularity was classified as not popular.
We found that svelte-purify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.
Security News
UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion.