Scrub HTML from input

gistfile1.txt

'use strict';

var tagBody = '(?:[^"\'>]|"[^"]*"|\'[^\']*\')*',

    tagOrComment = new RegExp(
    '<(?:' +
    // Comment body.
    '!--(?:(?:-*[^->])*--+|-?)' +
    // Special "raw text" elements whose content should be elided.
    '|script\\b' + tagBody + '>[\\s\\S]*?</script\\s*' +
    '|style\\b' + tagBody + '>[\\s\\S]*?</style\\s*' +
    // Regular name
    '|/?[a-z]' +
    tagBody +
    ')>', 'gi'
    );


function decodeText(str) {
    var txt = document.createElement('textarea');
    txt.innerHTML = str;
    return txt.value;
}

function sanitize(str) {
  var oldStr;
  do {
    oldStr = str;
    str = decodeText(str);
    str = str.replace(tagOrComment, '');
  } while (str !== oldStr);
  return str.replace(/</g, '&lt;');
}

module.exports = sanitize;