Run results for: xss vs. dompurify vs. sanitize-html

Run details:

User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0

Browser: Firefox 138

Operating system: Windows

Device Platform: Desktop

Date tested: one year ago

Test name	Executions per second
xss	34586.2 Ops/sec
dompurify	7603.7 Ops/sec

HTML Preparation code:

<script src="https://cdn.jsdelivr.net/npm/dompurify@3.1.6/dist/purify.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/xss@1.0.15/dist/xss.min.js"></script>

Script Preparation code:

var data = "<p>The expected release date is <strong>8/28/2024</strong>. Shipping for all orders will begin once the pre-order item is available in-store, should there be no unexpected delays.</p>\n<p><strong><span class=\"apple-converted-space&gt; &lt;/span&gt;&lt;/p&gt;\n&lt;p&gt;&lt;strong&gt;&lt;span class=\" apple-converted-space=\"\"> IMPORTANT NOTE : Orders containing one or more pre-orders are typically held until all items are released and available to ship together. </span></strong></p>\n<p><strong>Each Album Includes</strong></p>\n<ul>\n<li><b>Album Case</b></li>\n<li>\n<b>Mini Card (QR Type) : Random 1 out of 5</b><b></b>\n</li>\n<li><b>Selfie Photocard : Random 2 out of 10</b></li>\n<li><b>Image Card Set : 8 ea</b></li>\n<li><b>Sticker</b></li>\n<li><b>Invitation Card</b></li>\n</ul>\n<ul></ul>\n<ul></ul>\n<p>For in-store pickups, please refer to the in-store pickup policy tab for further information. Prices may vary in-store.</p>\n<p><img src=\"https://cdn.shopify.com/s/files/1/2420/2037/files/AEONIT_1st_Single_Album_-_LUMOS_Platform_Ver._Strip.webp?v=1724256230\"></p>\n<p style=\"text-align: center;\"><span style=\"color: #000000;\"><strong>⚠️All of the information above is subject to change⚠️</strong></span></p>"

Tests:

xss
filterXSS(data);
dompurify
DOMPurify.sanitize(data, { ALLOWED_ATTR: [] })