Typsichere Eingabebereinigung durch Branded Types

type SanitizedString = string & { readonly __brand: unique symbol };
 
function sanitizeInput(raw: string): SanitizedString {
  const sanitized = raw.replace(/<[^>]*>/g, "").trim();
  return sanitized as SanitizedString;
}
 
function renderContent(safeContent: SanitizedString): string {
  return `<article>${safeContent}</article>`;
}
 
const userInput = "<script>alert('xss')</script> Hello World ";
const safeText = sanitizeInput(userInput);
const htmlOutput = renderContent(safeText);