leizongmin / js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
http://jsxss.com
Other
5.19k stars 630 forks source link

Support number 0 #194

Closed zhixinpeng closed 4 years ago

zhixinpeng commented 4 years ago

when incoming html is the number 0, it's going to be empty.

leizongmin commented 4 years ago

xss function expected a string input. Number 0 is a wrong input, it will produce unexpected results.