1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
import { group } from "mitata";
import { bench, run } from "mitata";
var bunEscapeHTML = Bun.escapeHTML;
const matchHtmlRegExp = /["'&<>]/;
/**
* Escapes special characters and HTML entities in a given html string.
*
* @param {string} string HTML string to escape for later insertion
* @return {string}
* @public
*/
function reactEscapeHtml(string) {
const str = "" + string;
const match = matchHtmlRegExp.exec(str);
if (!match) {
return str;
}
let escape;
let html = "";
let index;
let lastIndex = 0;
for (index = match.index; index < str.length; index++) {
switch (str.charCodeAt(index)) {
case 34: // "
escape = """;
break;
case 38: // &
escape = "&";
break;
case 39: // '
escape = "'"; // modified from escape-html; used to be '''
break;
case 60: // <
escape = "<";
break;
case 62: // >
escape = ">";
break;
default:
continue;
}
if (lastIndex !== index) {
html += str.substring(lastIndex, index);
}
lastIndex = index + 1;
html += escape;
}
return lastIndex !== index ? html + str.substring(lastIndex, index) : html;
}
const long = ("lalala" + "<script>alert(1)</script>" + "lalala").repeat(9000);
const short = "lalala" + "<script>alert(1)</script>" + "lalala";
const middle =
"lalala".repeat(2000) + "<script>alert(1)</script>" + "lalala".repeat(2000);
const nothing = "lalala".repeat(9999);
group(`long (${long.length})`, () => {
bench("react's escapeHTML", () => reactEscapeHtml(long));
bench("bun's escapeHTML", () => bunEscapeHTML(long));
});
group(`short (${short.length})`, () => {
bench("react's escapeHTML", () => reactEscapeHtml(short));
bench("bun's escapeHTML", () => bunEscapeHTML(short));
});
group(`middle (${middle.length})`, () => {
bench("react's escapeHTML", () => reactEscapeHtml(middle));
bench("bun's escapeHTML", () => bunEscapeHTML(middle));
});
group(`nothing (${nothing.length})`, () => {
bench("react's escapeHTML", () => reactEscapeHtml(nothing));
bench("bun's escapeHTML", () => bunEscapeHTML(nothing));
});
await run();
|
