Sanitizing Server-Side HTML Rendering via DOMPurify and JSDOM in Next.js App Router

import { JSDOM } from 'jsdom';
import DOMPurify from 'dompurify';
 
const window = new JSDOM('').window;
const purify = DOMPurify(window);
 
export function sanitizeHtmlPayload(dirtyHtml) {
  if (typeof dirtyHtml !== 'string') {
    throw new TypeError('Payload must be a string');
  }
  return purify.sanitize(dirtyHtml, {
    ALLOWED_TAGS: ['b', 'i', 'em', 'strong', 'a'],
    ALLOWED_ATTR: ['href']
  });
}