DOM-XSS-Bereinigung in benutzerdefinierten Direktiven über AST-Compiler-Plugins

import { customRef } from 'vue';
 
const sanitizeCache = new WeakMap();
 
export function useSecureInput(initialValue) {
  return customRef((track, trigger) => {
    let value = String(initialValue).replace(/[<>&"']/g, (c) => `&#${c.charCodeAt(0)};`);
    return {
      get() {
        track();
        return value;
      },
      set(newValue) {
        const clean = String(newValue).replace(/[<>&"']/g, (c) => `&#${c.charCodeAt(0)};`);
        if (!sanitizeCache.has(clean)) {
          sanitizeCache.set(clean, true);
        }
        value = clean;
        trigger();
      }
    };
  });
}