Interweave

Description

Safely Render HTML in React

Interweave is a powerful React library designed to render HTML securely while providing additional features such as attribute filtering, automatic text wrapping with matchers, emoji rendering, and more.

Because Interweave does not depend on custom HTML parsers (except during server‑side rendering), it utilizes the browser’s native DOM parsing capabilities. This approach allows us to fully control the parsing process by inspecting every HTML element and its attributes, filtering out potentially dangerous values, and eliminating XSS vulnerabilities.

Furthermore, Interweave maintains explicit allowlists, blocklists, and banned lists for both HTML elements and attributes. The library has undergone multiple penetration tests with no issues discovered.