# Where is Aurelia 2's HTMLSanitizer?

**URL:** <https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446>\
**Category:** vNext\
**Created:** [June 12, 2024, 6:53pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446 "2024-06-12T18:53:16Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![mreiche](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/mreiche/32/1912_2.png) [@mreiche](https://discourse.aurelia.io/u/mreiche)\
**Post date:** [June 12, 2024, 6:53pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/1 "2024-06-12T18:53:16Z")

</div>

Aurelia 1 had an `HTMLSanitizer` interface. This is gone in Aurelia 2?

---

<div class="post-metadata">

**Author:** ![bigopon](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/bigopon/32/18_2.png) [@bigopon](https://discourse.aurelia.io/u/bigopon)\
**Post date:** [June 13, 2024, 2:58pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/2 "2024-06-13T14:58:55Z")

</div>

It’s now `ISanitizer`, the value converter that uses this is `SanitizeValueConverter`

---

<div class="post-metadata">

**Author:** ![mreiche](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/mreiche/32/1912_2.png) [@mreiche](https://discourse.aurelia.io/u/mreiche)\
**Post date:** [June 13, 2024, 3:00pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/3 "2024-06-13T15:00:57Z")

</div>

`ISanitizer` is no part of the `aurelia` package.

---

<div class="post-metadata">

**Author:** ![bigopon](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/bigopon/32/18_2.png) [@bigopon](https://discourse.aurelia.io/u/bigopon)\
**Post date:** [June 13, 2024, 3:11pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/4 "2024-06-13T15:11:09Z")

</div>

ahhh that’s a miss, thanks. Do you wanna help create your first PR 😃 ?

For now, pls import it from `@aurelia/runtime-html`

---

<div class="post-metadata">

**Author:** ![mreiche](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/mreiche/32/1912_2.png) [@mreiche](https://discourse.aurelia.io/u/mreiche)\
**Post date:** [June 13, 2024, 3:19pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/5 "2024-06-13T15:19:37Z")

</div>

As soon as I migrated successfully to Aurelia 2 beta 19.

---

<div class="post-metadata">

**Author:** ![rosa56](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/rosa56/32/2526_2.png) [@rosa56](https://discourse.aurelia.io/u/rosa56)\
**Post date:** [June 27, 2024, 4:51am UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/6 "2024-06-27T04:51:09Z")

</div>

In Aurelia 2, the HTMLSanitizer interface from Aurelia 1 is removed. Use external libraries like DOMPurify for HTML sanitization instead, providing greater flexibility and security for your applications.

---

<div class="post-metadata">

**Author:** ![mario.stopfer](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/mario.stopfer/32/2507_2.png) [@mario.stopfer](https://discourse.aurelia.io/u/mario.stopfer)\
**Post date:** [July 2, 2024, 4:17pm UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/7 "2024-07-02T16:17:35Z")

</div>

Can this be added to the documentsation so we know what to use without search for it online? @bigopon

---

<div class="post-metadata">

**Author:** ![mreiche](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.aurelia.io/mreiche/32/1912_2.png) [@mreiche](https://discourse.aurelia.io/u/mreiche)\
**Post date:** [July 3, 2024, 10:30am UTC](https://discourse.aurelia.io/t/where-is-aurelia-2s-htmlsanitizer/5446/8 "2024-07-03T10:30:58Z")

</div>

I migrated our library to Aurelia 2 including `Sanitizer` interface using `sanitize-html` library. Documentation here: [aurelia-components/src/value-converters/README.md at aurelia2 · telekom-mms/aurelia-components · GitHub](https://github.com/telekom-mms/aurelia-components/blob/aurelia2/src/value-converters/README.md#sanitize-html-html-sanitizer)
