Josh Knapp
bd15a33984
Closes XSS hole in HtmlBlock by sanitizing user/AI-supplied markup through DOMPurify before passing to dangerouslySetInnerHTML. Adds Vitest + jsdom for unit testing with 5 passing tests covering script stripping, on-event handler removal, javascript: URL blocking, iframe allowlist, and form/input stripping. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
9 lines
196 B
TypeScript
9 lines
196 B
TypeScript
import { defineConfig } from 'vitest/config';
|
|
export default defineConfig({
|
|
test: {
|
|
globals: true,
|
|
environment: 'jsdom',
|
|
include: ['src/**/*.test.ts', 'src/**/*.test.tsx'],
|
|
},
|
|
});
|