owlgrin/xss

Xss Sanitizer for Laravel

0.1.1 2016-11-01 05:40 UTC

Requires

• php: >=5.3.0
• illuminate/support: >=4.1.0

MIT

• Mohit Mamoria

README

This package is the custom port of Codeigniter's Xss class.

Installation

Require the package in composer.json:

"owlgrin/xss": "0.1.*"

Then, include the following in the array on service providers in config/app.php:

'Owlgrin\Xss\XssServiceProvider',

And, if you want to use it as facade, bind the facade in facade's array in config/app.php:

'Xss'            => 'Owlgrin\Xss\XssFacade',

Usage

You can clean your input HTML code from Xss attacks using the clean() method:

<?php

$input = Input::get('html');

$cleanedHtml = Xss::clean($input);

If you want to conserve some custom tags that the stripper strips, you can pass them in array as second argument:

<?php

$input = Input::get('html');

$cleanedHtml = Xss::clean($input, ['iframe']);