I have been using the node.js escape-html-whitelist module until recently when it stopped working:

/home/runner/chat/index.js:196
    allowedTags: escapeHtml.defaultOptions.concat(['a']),

So now I am looking for a different solution, kind of like what Discord does with converting plain-text links to anchor tags but obviously not allowing html.

I have tried using the escape-html-whitelist module located here but keep getting errors.

CodePudding user response：

The escape-html-whitelist module is a utility that can be used to escape certain HTML characters in a string, such as the < and > characters, which are used to denote HTML tags. This is often used to prevent potential security vulnerabilities that can arise when user-generated input is displayed on a page without being properly escaped.

If you are using the escape-html-whitelist module and it is no longer working, there could be a few different reasons for this. It is possible that there is a bug in the module itself, or that the module has been deprecated and is no longer supported. In either case, it may be necessary to find an alternative solution.

One way to do this would be to use the built-in escape function in JavaScript, which can be used to escape HTML characters in a string. For example, you could use the following code to escape a string containing HTML characters:

    const escapedString = escape(inputString);

Alternatively, you could use a regular expression to remove any HTML tags from the string. This would allow you to convert plain-text links into anchor tags, while still preventing any HTML from being included in the string. Here is an example of how you could do this:

    const regex = /<\/?[^>] (>|$)/g;
    const sanitizedString = inputString.replace(regex, '');

These are just a few possible solutions for escaping HTML characters in a string. There are many other ways to do this, and the best approach will depend on your specific needs and the requirements of your project.