htmlsanitizer.go RawHistoryFolder

1package sanitize
2
3import (
4	"errors"
5
6	"github.com/microcosm-cc/bluemonday"
7)
8
9// SanitizeHTML takes a string containing raw HTML and returns a sanitized string.
10func SanitizeHTML(rawHTML string) (string, error) {
11	// Use bluemonday's UGCPolicy for user generated content
12	p := bluemonday.UGCPolicy()
13
14	// Sanitize the raw HTML string
15	sanitized := p.Sanitize(rawHTML)
16
17	if sanitized == "" && rawHTML != "" {
18		return "", errors.New("Sanitization removed all content")
19	}
20
21	return sanitized, nil
22}