fixes sanitization so that we can actually use this package again

rchipka · May 31, 2019 · 7a09847 · 7a09847
1 parent 37de803
commit 7a09847
Show file tree

Hide file tree

Showing 2 changed files with 342 additions and 45 deletions.
diff --git a/lib/Request.js b/lib/Request.js
@@ -1,8 +1,8 @@
 'use strict';
 
-var needle = require('needle'),
-    URL    = require('url'),
-    libxml = require('libxmljs-dom'),
+var needle       = require('needle'),
+    URL          = require('url'),
+    libxml       = require('libxmljs-dom'),
     sanitizeHtml = require('sanitize-html');
 
 /**
@@ -97,7 +97,12 @@ function Request(method, url, params, opts, tries, callback) {
 
             next(opts.process_response(data, res));
         } else {
-            next(data);
+            const cleanData = sanitizeHtml(data, {
+                allowedTags: false,
+                allowedAttributes: false,
+                selfClosing: [],
+            });
+            next(cleanData);
         }
 
     })