Sanitizing User-Generated Rich Text with DOMPurify

import React, { useState } from 'react';
import DOMPurify from 'dompurify';
 
export function SafeHtmlViewer({ rawUserInput }) {
  const sanitizedHtml = DOMPurify.sanitize(rawUserInput, {
    ALLOWED_TAGS: ['b', 'i', 'em', 'strong', 'a'],
    ALLOWED_ATTR: ['href', 'title']
  });
 
  return (
    <div
      className="preview-box"
      dangerouslySetInnerHTML={{ __html: sanitizedHtml }}
    />
  );
}