coreui / coreui-pro / 28759335552

95%

push

github

refactor(util/sanitizer): add shared escapeHtml and SVGAllowlist (#597)

Introduce two reusable primitives next to sanitizeHtml/DefaultAllowlist so
components stop defining their own copies:
- escapeHtml(text) — HTML-escape a string (attributes and text content).
- SVGAllowlist — DefaultAllowlist extended with SVG elements (moved out of
  rating.js, which now imports it).

Foundational for the security fixes that consume these (Autocomplete label
escaping, Chip icon sanitize, Calendar aria/label escaping).

2778 of 3068 branches covered (90.55%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

7161 of 7438 relevant lines covered (96.28%)

736.25 hits per line