Sanitize

Methods for sanitizing HTML template strings before rendering them into the UI.

sanitize()
Sanitizes an HTML string by removing malicious and unallowed properties, attributes, and elements.
Syntax 
/**
 * @param  {String} html The raw HTML string
 * @return {String}      The sanitized HTML string
 */
portal.sanitize(html)
Example 
// Sanitize a string
// Returns '<img src="x">'
var sanitized = portal.sanitize('<img onerror="alert(\'xss attack\')" src="x">');
sanitizeNoHTML()
Removes all HTML from a template string.
Syntax 
/**
 * @param  {String} str The raw string
 * @return {String}     The sanitized string
 */
portal.sanitizeNoHTML(str)
Example 
// Remove all HTML from a string
// Returns "Hello world"
var sanitized = portal.sanitize('<h1>Hello world</h1>');