v-html防止XSS攻击

安装dompurify
npm i dompurify @types/dompurify -D

<div v-html="DOMPurify.sanitize(msg, { ADD_ATTR: ['target'] })"></div>

import DOMPurify from 'dompurify';

const name = ref('康');
const msg = ref('name:'+`${name}`);
1
2
3
4
5
6