Ecosystem Playgrounds

Test and interact with typepurify packages live in your browser.

@typepurify/core @typepurify/fetch @typepurify/logger @typepurify/json @typepurify/retry @typepurify/dedupe @typepurify/cache @typepurify/paginate @typepurify/types

@typepurify/security @typepurify/react-state @typepurify/react-table @typepurify/llm @typepurify/cli

Security Utilities

Protect against XSS by sanitizing malicious HTML input on the fly.

Malicious HTML Input

Sanitized Output (Safe to render)

&lt;div class=&quot;content&quot;&gt;
  &lt;h1&gt;Hello World&lt;/h1&gt;
  &lt;script&gt;alert(&quot;XSS Attack!&quot;);&lt;/script&gt;
  &lt;p&gt;This is some &lt;b onmouseover=&quot;alert(&#39;attack!&#39;)&quot;&gt;bold&lt;/b&gt; text.&lt;/p&gt;
  &lt;a href=&quot;javascript:alert(&#39;xss&#39;)&quot;&gt;Click me&lt;/a&gt;
  &lt;img src=&quot;valid.jpg&quot; onerror=&quot;alert(&#39;xss&#39;)&quot; /&gt;
&lt;/div&gt;

Live Render Preview (Dangerously Set Inner HTML)

<div class="content"> <h1>Hello World</h1> <script>alert("XSS Attack!");</script> <p>This is some <b onmouseover="alert('attack!')">bold</b> text.</p> <a href="javascript:alert('xss')">Click me</a> <img src="valid.jpg" onerror="alert('xss')" /> </div>

The output above is safely rendered using dangerouslySetInnerHTML because it has been sanitized.