From 2f73fd3a9d4e1b6158b2bace7a4a7a407f724fd3 Mon Sep 17 00:00:00 2001
From: Knut Sveidqvist <knut.sveidqvist@ipiccolo.com>
Date: Mon, 5 Jul 2021 10:21:11 +0200
Subject: [PATCH] #2170 Adding dompurify

---
 docs/Setup.md                 |  2 +-
 src/diagrams/common/common.js | 28 ++++------------------------
 2 files changed, 5 insertions(+), 25 deletions(-)

diff --git a/docs/Setup.md b/docs/Setup.md
index 6817f083f..4b5dc0888 100644
--- a/docs/Setup.md
+++ b/docs/Setup.md
@@ -1110,7 +1110,7 @@ mermaidAPI.initialize({
 <script>
   var config = {
     theme:'default',
-    logLevel: 5, // corresponds with "fatal"
+    logLevel:'fatal',
     securityLevel:'strict',
     startOnLoad:true,
     arrowMarkerAbsolute:false,
diff --git a/src/diagrams/common/common.js b/src/diagrams/common/common.js
index 0de97b269..14bb3dd89 100644
--- a/src/diagrams/common/common.js
+++ b/src/diagrams/common/common.js
@@ -1,3 +1,5 @@
+import DOMPurify from 'dompurify';
+
 export const getRows = s => {
   if (!s) return 1;
   let str = breakToPlaceholder(s);
@@ -34,30 +36,8 @@ export const removeScript = txt => {
   return rs;
 };
 
-export const sanitizeText = (text, config) => {
-  let txt = text;
-  let htmlLabels = true;
-  if (
-    config.flowchart &&
-    (config.flowchart.htmlLabels === false || config.flowchart.htmlLabels === 'false')
-  ) {
-    htmlLabels = false;
-  }
-
-  if (htmlLabels) {
-    const level = config.securityLevel;
-
-    if (level === 'antiscript') {
-      txt = removeScript(txt);
-    } else if (level !== 'loose') {
-      // eslint-disable-line
-      txt = breakToPlaceholder(txt);
-      txt = txt.replace(/</g, '&lt;').replace(/>/g, '&gt;');
-      txt = txt.replace(/=/g, '&equals;');
-      txt = placeholderToBreak(txt);
-    }
-  }
-
+export const sanitizeText = text => {
+  const txt = DOMPurify.sanitize(text);
   return txt;
 };