Erzwingung von Sicherheitsgrenzen mit Branded-String-Typen

declare const brand: unique symbol;
 
type Branded<T, B> = T & { [brand]: B };
type SanitizedHtml = Branded<string, "SanitizedHtml">;
 
function sanitizeInput(rawInput: string): SanitizedHtml {
  const escaped = rawInput.replace(/</g, "&lt;").replace(/>/g, "&gt;");
  return escaped as SanitizedHtml;
}
 
function renderComponent(html: SanitizedHtml): void {
  // Safe to render without XSS vulnerability risk
}