From 022eb9be916fac98227add55cc53547249ccfd2d Mon Sep 17 00:00:00 2001 From: Koji Wakayama Date: Mon, 3 Aug 2026 00:42:51 +0200 Subject: [PATCH] refactor(security): drop dead escapeHtml re-export from html-sanitizer The html-sanitizer module re-exported escapeHtml purely as a pass-through from #veryfront/utils/html-escape.ts. No importer of html-sanitizer consumes it, the security barrel does not re-export the module, and security/client/html-sanitizer.ts is not in the deno.json exports map, so the alias was unreachable public surface. Every escapeHtml consumer already imports from the html-escape modules directly. --- src/security/client/html-sanitizer.ts | 3 --- 1 file changed, 3 deletions(-) diff --git a/src/security/client/html-sanitizer.ts b/src/security/client/html-sanitizer.ts index 21e27e0539..f3870bc048 100644 --- a/src/security/client/html-sanitizer.ts +++ b/src/security/client/html-sanitizer.ts @@ -7,11 +7,8 @@ * - validateTrustedHtml() provides defense-in-depth for server HTML */ -import { escapeHtml } from "#veryfront/utils/html-escape.ts"; import { SECURITY_VIOLATION } from "#veryfront/errors/error-registry.ts"; -export { escapeHtml }; - /** * Patterns that RSC should never generate. * These indicate potential server compromise or misconfiguration.