fix: throw TypeError if 'html' is non-string argument

Author: ericnorris

package.json

@@ -10,7 +10,7 @@
   "main": "src/striptags.js",
   "homepage": "https://github.com/ericnorris/striptags",
   "bugs": "https://github.com/ericnorris/striptags/issues",
-  "version": "3.1.1",
+  "version": "3.2.0",
   "devDependencies": {
     "istanbul": "^0.4.5",
     "mocha": "^3.2.0"

src/striptags.js

@@ -56,6 +56,10 @@
     }
 
     function striptags_internal(html, context) {
+        if (typeof html != "string") {
+            throw new TypeError("'html' parameter must be a string");
+        }
+
         let allowable_tags  = context.allowable_tags;
         let tag_replacement = context.tag_replacement;
 

test/striptags-test.js

@@ -157,4 +157,13 @@ describe('striptags', function() {
             assert.equal(part_three, '< amet');
         });
     });
+
+    it('GHSL-2021-074', function() {
+        assert.throws(
+            function() {
+                striptags(["type-confusion"]);
+            },
+            TypeError,
+        );
+    });
 });