As per the security review T144467: Security review for Google MT for Content Translation we need to sanitize the HTML output from MT engines before it is presented back to translator.

The best way to do this is to reuse the sanitizer in parsoid. But currently the sanitizer is token based and cannot handler directly. It is also not a standalone library.

Following tickets exist to address this general sanitizer requirement though.

• T54941: Refactor sanitizer to work on the DOM too
• T96461: Systematic sanitization for SVGs and HTML

We need to know if this tickets are actionable in near future. And if not, fill the gap using a generic good enough HTML sanitizer to address security concerns - an option is DOMPurify.