Benchmark: Sanitize-html vs DOMpurify

HTML Preparation code:

<script src="https://unpkg.com/sanitize-html@1.23.0/dist/sanitize-html.js"></script>
<script src="https://unpkg.com/dompurify@2.0.11/dist/purify.js"></script>

Script Preparation code:

const testString = "<b>Welcome to safeland</b><br><a href='javascript:alert(1)'>This is fun</a><br><img src=x onerror=console.log(1)>"

Tests:

sanitize
const result = sanitizeHtml("Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)>")
purify
const result = DOMPurify.sanitize("Welcome to safeland <a href='javascript:alert(1)'>This is fun</a> <img src=x onerror=console.log(1)>")

Rendered benchmark preparation results:

Suite status: <idle, ready to run>

Previous results

Test case name	Result
sanitize
purify

Fastest: N/A

Slowest: N/A

ⓘ Get performance results from real users on your website with Request Metrics.

Website Performance Monitoring by Request Metrics

Latest run results:

Run details: (Test run date: 4 months ago)

User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0

Browser/OS: Chrome 126 on Mac OS X 10.15.7

View result in a separate tab

Test name	Executions per second
sanitize	165103.2 Ops/sec
purify	35405.0 Ops/sec

Sanitize-html vs DOMpurify (version: 0)

Comparing performance of: sanitize vs purify

Created: 3 years ago by: Guest

Jump to the latest result

sanitize

purify

Suite status: <idle, ready to run>

Experimental features:

Fastest: N/A

Slowest: N/A