Run results for: sanitize-html with escaping option vs lodash

Run details:

User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0

Browser: Firefox 129

Operating system: Windows

Device Platform: Desktop

Date tested: 2 years ago

Benchmark engine: Benchmark.js

lodash

13K/s

sanitize-html

3K/s

View exact numbers

Test name	Executions per second
✓ lodash	13,100 Ops/sec
sanitize-html	3,158 Ops/sec

HTML Preparation code:


<script src='https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.5/lodash.min.js'></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/sanitize-html/1.27.5/sanitize-html.min.js" integrity="sha512-1WdDeZGPykoWawFKD3NGJfZM+4hq2+OxUF8ZJrrqFBNU3J+Q5Tgvn+XwHNt8HaVs1MRFFlAgtOgyJr6/mqN/xw==" crossorigin="anonymous" referrerpolicy="no-referrer"></script>

Script Preparation code:

var escape = title => _.escape(_.unescape(title))
var option = {
    allowedTags: [],
    allowedAttritbutes: [],
  	disallowedTagsMode: 'escape'
}

Tests:

lodash
console.log(escape("&ds;<")) console.log(escape("<속보>")) console.log(escape("<속보>")) console.log(escape("<marquee></marquee>")) console.log(escape("<marquee>속보</marquee>")) console.log(escape("<marquee><속보></marquee>")) console.log(escape("<속보>")) console.log(escape("<속보>"))
sanitize-html
console.log(sanitizeHtml("&ds;<", option)) console.log(sanitizeHtml("<속보>", option)) console.log(sanitizeHtml("<속보>", option)) console.log(sanitizeHtml("<marquee></marquee>", option)) console.log(sanitizeHtml("<marquee>속보</marquee>", option)) console.log(sanitizeHtml("<marquee><속보></marquee>", option)) console.log(sanitizeHtml("<속보>", option)) console.log(sanitizeHtml("<속보>", option))