Bereinigung unsicherer Benutzereingaben mittels Sicherheits-Pipes

import { Pipe, PipeTransform } from '@angular/core';
import { DomSanitizer, SafeHtml } from '@angular/platform-browser';
 
@Pipe({
  name: 'sanitizeHtml',
  standalone: true
})
export class SanitizeHtmlPipe implements PipeTransform {
  constructor(private readonly sanitizer: DomSanitizer) {}
 
  transform(rawContent: string | null | undefined): SafeHtml {
    if (!rawContent || typeof rawContent !== 'string') {
      return '';
    }
 
    const cleanContent = rawContent.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, '');
    return this.sanitizer.bypassSecurityTrustHtml(cleanContent);
  }
}