XSS-Prävention mit kontextbezogenen DomSanitizer-Sicherheitsmethoden

import { Pipe, PipeTransform } from '@angular/core';
import { DomSanitizer, SafeHtml, SafeResourceUrl } from '@angular/platform-browser';
 
@Pipe({ name: 'safeContent', standalone: true })
export class SafeContentPipe implements PipeTransform {
  constructor(private sanitizer: DomSanitizer) {}
 
  transform(value: string, type: 'html' | 'resourceUrl'): SafeHtml | SafeResourceUrl {
    switch (type) {
      case 'html':
        return this.sanitizer.bypassSecurityTrustHtml(value);
      case 'resourceUrl':
        return this.sanitizer.bypassSecurityTrustResourceUrl(value);
      default:
        throw new Error(`Unsupported sanitization context: ${type}`);
    }
  }
}