pallets / markupsafe

Safely add untrusted strings to HTML/XML markup.

kkomelin / isomorphic-dompurify

Use DOMPurify on server and client in the same way