Function: sanitizeHtml()

sanitizeHtml(dirtyHtml): string

Sanitizes an HTML string by stripping dangerous elements and attributes. Preference order: SleekGrid sanitizer (sleekgrid.formatterContext()?.sanitizer or sleekgrid.gridDefaults.sanitizer), DOMPurify.sanitize if present, otherwise a built-in DOMParser implementation that removes script/iframe/object/embed/form/style/link and event-handler / unsafe-URL attributes. Falls back to htmlEncode if DOMParser is unavailable or parsing throws.

Parameters

dirtyHtml

string

Untrusted HTML markup to sanitize. Falsy values return an empty string; strings without HTML tags/entities are returned as-is (fast path).

Returns

string

The sanitized HTML string safe for insertion via innerHTML.

Remarks

This duplicates the basic DOM sanitizer logic so corelib works standalone with or without SleekGrid loaded.