A calm place to write long-form, and publish it to the open social web.
skypress.blog/
Lock sanitizer: mention link keeps class+href, drops data-did
author
Jeremy Herve
date
(Jun 12, 2026, 6:54 PM +0200)
commit
dcfcb8a8
dcfcb8a895511e5644e26303445ac4790dc03d2f
parent
68097989
68097989a25eb6414659d443387c6044518448dc
+10
+10
src/lib/reader/sanitize.test.ts
+10
src/lib/reader/sanitize.test.ts
···
35
35
expect( clean ).toContain( 'rel="noopener noreferrer nofollow ugc"' );
36
36
expect( clean ).toContain( 'target="_blank"' );
37
37
} );
38
+
39
+
it( 'keeps a mention link (class + href) but strips its data-did', () => {
40
+
const dirty =
41
+
'<p>Hi <a class="skypress-mention" href="https://bsky.app/profile/alice.bsky.social" data-did="did:plc:alice">@alice.bsky.social</a></p>';
42
+
const clean = sanitizeArticleHtml( dirty );
43
+
expect( clean ).toContain( 'class="skypress-mention"' );
44
+
expect( clean ).toContain( 'href="https://bsky.app/profile/alice.bsky.social"' );
45
+
expect( clean ).not.toContain( 'data-did' );
46
+
expect( clean ).toContain( '@alice.bsky.social' );
47
+
} );
38
48
} );