Fix DOMPurify error

Author: floscher

client/src/markdown-converter-client.ts

@@ -4,7 +4,7 @@ import DOMPurify from "isomorphic-dompurify";
 export class MarkdownConverterClient extends MarkdownConverter {
   private static instance: MarkdownConverterClient;
 
-  protected override dompurify = DOMPurify();
+  protected override sanitize = (s: string, config: { ADD_TAGS: string[]; ADD_ATTR: string[] }) => DOMPurify.sanitize(s);
 
   private constructor() {
     super((url: string) => fetch(url).then((it) => it.text()));

common/package.json

@@ -12,7 +12,6 @@
   "dependencies": {
     "highlight.js": "10.7.3",
     "isomorphic-dompurify": "2.26.0",
-    "jsdom": "25.0.0",
     "marked": "14.1.2",
     "marked-highlight": "2.1.4",
     "marked-mangle": "1.1.9",

common/src/markdown-converter-common.ts

@@ -1,6 +1,5 @@
 import { DataUrl } from "@common/util/base64.js";
 import { Buffer } from "buffer";
-import { DOMPurify } from "dompurify";
 import highlightjs from "highlight.js";
 import { marked, MarkedExtension, Token, Tokens } from "marked";
 import { markedHighlight } from "marked-highlight";
@@ -91,7 +90,7 @@ export abstract class MarkdownConverter {
       };
     };
 
-  protected abstract dompurify: DOMPurify;
+  protected abstract sanitize: (s: string, config: { ADD_TAGS: string[]; ADD_ATTR: string[] }) => string;
 
   /**
    *
@@ -232,7 +231,7 @@ export abstract class MarkdownConverter {
         async: true,
       })
       .then((parsedInput) =>
-        this.dompurify.sanitize(parsedInput, {
+        this.sanitize(parsedInput, {
           // Allowed tags and attributes inside markdown
           ADD_TAGS: ["iframe", "foreignObject"], // foreignObject is needed for SVGs that show html tags inside them like mermaid-diagrams
           ADD_ATTR: ["allow", "allowfullscreen", "frameborder", "scrolling"],

package-lock.json

@@ -1,9 +1,5 @@
 import fs from "fs";
 import path from "path";
-import { fileURLToPath } from "url";
-import { dirname } from "path";
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
 
 let numFoundErrors = 0;
 

scripts/check-packages.mts

@@ -1,6 +1,5 @@
 import { MarkdownConverter } from "@fumix/fu-blog-common";
 import DOMPurify from "isomorphic-dompurify";
-import { JSDOM } from "jsdom";
 import fetch from "node-fetch";
 
 export class MarkdownConverterServer extends MarkdownConverter {
@@ -10,7 +9,7 @@ export class MarkdownConverterServer extends MarkdownConverter {
    * On the server side, we need to pass a new window object to DOMPurify.
    * It doesn't work to just call `DOMPurify.sanitize()` directly like on the client side.
    */
-  protected override dompurify: DOMPurify.DOMPurify = DOMPurify.default(new JSDOM("").window);
+  protected override sanitize = (s: string, config: { ADD_TAGS: string[]; ADD_ATTR: string[] }) => DOMPurify.sanitize(s, config);
 
   private constructor() {
     super((url: string) => fetch(url).then((it) => it.text()));