blah blah
';\nconsole.log('\\n--- Sanitization Example ---');\nconst sanitized = htmlParser.sanitize(maliciousHtml, {\n\telements: [ 'script' ], // Elements to remove\n\tattributes: [ 'onclick' ], // Attributes to remove\n\tcomments: true // Remove comments\n});\nconsole.log('Original: %s', maliciousHtml);\nconsole.log('Sanitized: %s', sanitized);","lang":"javascript","description":"This quickstart demonstrates both the callback-based HTML parsing and the sanitization features of the library. It shows how to process an HTML string, logging events for various tokens, and how to remove malicious script tags, event attributes, and comments."},"warnings":[{"fix":"Migrate to a maintained HTML parsing and sanitization library like `htmlparser2` or `parse5` for parsing, and a dedicated sanitization library like `dompurify` for security.","message":"This package is pre-1.0 (v0.11.0) and abandoned, meaning its API is not stable and may have contained breaking changes between minor versions. There is no guarantee of backward compatibility.","severity":"breaking","affected_versions":"<=0.11.0"},{"fix":"Always use `const htmlParser = require('html-parser');` to import the library in Node.js environments.","message":"The package is CommonJS-only and does not provide ES module exports. Attempting to use `import` statements will result in errors.","severity":"gotcha","affected_versions":">=0.1.0"},{"fix":"For secure HTML sanitization, use actively maintained and peer-reviewed libraries such as `dompurify`. Consider server-side sanitization as a primary defense.","message":"The `sanitize` function, while provided, relies on simple element/attribute blacklists or callback logic. Given the library's abandonment, it is highly unlikely to be robust against modern XSS vectors and other security vulnerabilities. It should not be solely relied upon for security-critical sanitization without thorough, independent auditing.","severity":"gotcha","affected_versions":">=0.1.0"},{"fix":"It is strongly recommended to migrate to a modern, actively maintained HTML parsing and sanitization library.","message":"This package is over nine years old and has not been updated. It may contain unpatched security vulnerabilities, performance issues, or incompatibilities with newer Node.js versions or browser environments.","severity":"gotcha","affected_versions":">=0.1.0"}],"env_vars":null,"last_verified":"2026-04-21T00:00:00.000Z","next_check":"2026-07-20T00:00:00.000Z","problems":[{"fix":"Ensure you are using CommonJS `require` and accessing `parse` as a method of the default export: `const htmlParser = require('html-parser'); htmlParser.parse(...)`","cause":"Attempting to use `import { parse } from 'html-parser';` or not correctly requiring the module.","error":"TypeError: htmlParser.parse is not a function"},{"fix":"Add `const htmlParser = require('html-parser');` at the top of your file to ensure the module is loaded and accessible.","cause":"The module was not correctly `require`d or is out of scope.","error":"ReferenceError: htmlParser is not defined"},{"fix":"Review the `sanitize` options carefully. `elements` and `attributes` arrays specify *what to remove*, or provide a callback function that returns `true` for items to be removed. Ensure `comments: true` is set if comments should be stripped.","cause":"Incorrect configuration of the `elements` or `attributes` options in the `sanitize` method, or using the `comments: false` option.","error":"Sanitized HTML still contains unwanted elements/attributes."}],"ecosystem":"npm"}