elementareteilchen / html-purify
Adds html purify functionality as viewhelper and service class
Installs: 115
Dependents: 0
Suggesters: 0
Security: 0
Stars: 3
Watchers: 4
Forks: 1
Open Issues: 0
Type:typo3-cms-extension
Requires
- ezyang/htmlpurifier: ^4.13
- typo3/cms-core: ^10.4 || ^11.5
README
Purify HTML to prevent XSS attacks or unwanted HTML.
Features
This extension provides you with opportunities to purify specific HTML which may is not fully under your control in order to remove possible Cross-Site-Scripting (XSS) attacks.
Installation
Simply install the extension with Composer.
composer require elementareteilchen/html-purify
This extension uses ezyang/htmlpurifier, which is set as composer requirement to be loaded automatically.
Usage
Viewhelper
<hp:purify allowedHtmlTags="strong,em">{someVariableWithPotentialXSS -> f:format.raw()}</hp:purify>
{someVariableWithPotentialXSS -> f:format.raw() -> hp:purify()}
{hp:purify(allowedHtmlTags: 'p,strong', htmlContent: '<p>Text with <strong>HTML</strong> but <em>EM will be removed</em></p>')}
Service in PHP code
$purifiedHtml = \ElementareTeilchen\HtmlPurify\Service\PurifyService::purify($htmlContent, $allowedHtmlTags);