diff --git a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts b/plugins/techdocs/src/reader/transformers/sanitizeDOM.test.ts similarity index 95% rename from plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts rename to plugins/techdocs/src/reader/transformers/sanitizeDOM.test.ts index 6296793e2a..8e5b245941 100644 --- a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts +++ b/plugins/techdocs/src/reader/transformers/sanitizeDOM.test.ts @@ -14,9 +14,9 @@ * limitations under the License. */ -import { createTestShadowDom, FIXTURES } from '../../../test-utils'; -import { Transformer } from '../index'; -import { sanitizeDOM } from './index'; +import { createTestShadowDom, FIXTURES } from '../../test-utils'; +import { Transformer } from './index'; +import { sanitizeDOM } from './sanitizeDOM'; const injectMaliciousLink = (): Transformer => dom => { const link = document.createElement('a'); diff --git a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.ts b/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts similarity index 76% rename from plugins/techdocs/src/reader/transformers/sanitizeDOM/index.ts rename to plugins/techdocs/src/reader/transformers/sanitizeDOM.ts index f2ae7df590..5e352e23a1 100644 --- a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.ts +++ b/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts @@ -14,17 +14,12 @@ * limitations under the License. */ -// @ts-ignore -import sanitizeHtml from 'sanitize-html'; -import type { Transformer } from '../transformer'; import DOMPurify from 'dompurify'; - -// TODO(freben): move all of this out of index +import type { Transformer } from './transformer'; export const sanitizeDOM = (): Transformer => { return dom => { return DOMPurify.sanitize(dom.innerHTML, { - // TODO: hmm... https://security.stackexchange.com/questions/205975/is-xss-in-canonical-link-possible ADD_TAGS: ['link'], WHOLE_DOCUMENT: true, RETURN_DOM: true,