Fixed local corpus · pinned library · no runtime network
Sanitizer API vs DOMPurify
Truth limit: This finite corpus is regression evidence for one minimal rich-text allowlist in the current browser. It is not a security certification or a substitute for patching, CSP, Trusted Types, moderation, and incident response.
Capability policy and fixture
Allowed elements: p, strong, em, code, ul, ol, li, blockquote, a, br. The only allowed attribute is href on links; only http, https, mailto, and relative URLs may survive.