Run results for: Dompurify, Sanitize

Run details:

User agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1

Browser: Mobile Safari 18

Operating system: iOS 18.3.2

Device Platform: Mobile

Date tested: 15 days ago

Test name	Executions per second
DOMPurify with IN_PLACE	39072.9 Ops/sec
Sanitize HTML	478799456.0 Ops/sec
DOMPurify without IN_PLACE	38069.9 Ops/sec

HTML Preparation code:

<script src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/2.2.7/purify.min.js"></script>

Tests:

DOMPurify with IN_PLACE
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> ` const result = DOMPurify.sanitize(testString,{IN_PLACE:true})
Sanitize HTML
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> `
DOMPurify without IN_PLACE
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> ` const result = DOMPurify.sanitize(testString)

Run results for: Dompurify, Sanitize

DOMPurify with IN_PLACE

Sanitize HTML

DOMPurify without IN_PLACE