How to parse `login_error_message` using dompurify

parse_login_error_message.js

import DOMPurify from 'dompurify';

// Add a hook to make all links open a new window
DOMPurify.addHook('afterSanitizeAttributes', function(node) {
    // set all elements owning target to target=_blank - true for all <a>'s even if they don't have a target attribute defined in html
    if ('target' in node) {
        node.setAttribute('target','_blank');
        // prevent https://www.owasp.org/index.php/Reverse_Tabnabbing
        node.setAttribute('rel', 'noopener noreferrer');
    }
});

// Then once you have a login_error_message value:
const sanitizedLoginErrorMessage = DOMPurify.sanitize(login_error_message);
document.getElementById('your-error-element').innerHTML = sanitizedLoginErrorMessage;
/**
 * In react you can use dangerouslySetInnerHTML:
 * <p
 *   dangerouslySetInnerHTML={{
 *     __html: sanitizedLoginErrorMessage,
 *   }}
 * />
 */