diff --git a/src/vhtml.js b/src/vhtml.js index 0e03f69..1146235 100644 --- a/src/vhtml.js +++ b/src/vhtml.js @@ -9,7 +9,7 @@ let DOMAttributeNames = { htmlFor: 'for' }; -let sanitized = {}; +let sanitized = new WeakMap(); /** Hyperscript reviver that constructs a sanitized HTML string. */ export default function h(name, attrs) { @@ -47,7 +47,7 @@ export default function h(name, attrs) { for (let i=child.length; i--; ) stack.push(child[i]); } else { - s += sanitized[child]===true ? child : esc(child); + s += sanitized.has(child) ? child : esc(child); } } } @@ -55,6 +55,6 @@ export default function h(name, attrs) { s += name ? `${name}>` : ''; } - sanitized[s] = true; + sanitized.set(s, true); return s; }
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: