Run results for: Dompurify, Sanitize

Run details:

User agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1

Browser: Mobile Safari 18

Operating system: iOS 18.3.2

Device Platform: Mobile

Date tested: one year ago

Sanitize HTML

478.8M/s

DOMPurify with IN_PLACE

39K/s

DOMPurify without IN_PLACE

38K/s

View exact numbers

Test name	Executions per second
✓ Sanitize HTML	478,799,456 Ops/sec
DOMPurify with IN_PLACE	39,073 Ops/sec
DOMPurify without IN_PLACE	38,070 Ops/sec

HTML Preparation code:

<script src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/2.2.7/purify.min.js"></script>

Tests:

DOMPurify with IN_PLACE
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> ` const result = DOMPurify.sanitize(testString,{IN_PLACE:true})
Sanitize HTML
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> `
DOMPurify without IN_PLACE
const testString = ` Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)> ` const result = DOMPurify.sanitize(testString)