I don&#x27;t think the idea is that the sanitization happens on the client when they submit content. The client can do the sanitization when they view content. Often it will make sense for the server to do it, but sometimes not. Imagine you&#x27;re writing an email client web app against someone else&#x27;s API, and their API gives you the raw html of email messages that people have sent to you. Then it&#x27;s the client&#x27;s job to sanitize that HTML for rendering.<p>Also you can run that library on the server with node.