sank3/htmlpurifier

Standards compliant HTML filter written in PHP

Maintainers

Details

github.com/sank3/htmlpurifier

Homepage

Source

Installs: 91

Dependents: 0

Suggesters: 0

Security: 0

Stars: 0

Watchers: 0

Forks: 328

4.20.1 2020-11-18 08:32 UTC

Requires

  • php: >=5.2

Requires (Dev)

LGPL-2.1-or-later 04b7bea8af0611ea3954bc439923d3f4d48eee39

html

This package is auto-updated.

Last update: 2024-10-29 05:59:26 UTC

README

Forked From https://github.com/ezyang/htmlpurifier

Improvements-

  • HTML5 new element support - nav, section, article, aside, header, footer, address, hgroup
  • Images/Media embeds - video, figure, figcaption
  • Form Attributes added - placeholder, required
  • Input type enum extended to - button, checkbox, color, date, datetime-local, email, file, hidden, image, month, number, password, radio, range, reset, search, submit, tel, text, time, url, week
  • HTML5 Data attributes - will not be removed and parsed as it is. Supported only if HTML.Trusted is set

=============

HTML Purifier is an HTML filtering solution that uses a unique combination of robust whitelists and aggressive parsing to ensure that not only are XSS attacks thwarted, but the resulting HTML is standards compliant.

HTML Purifier is oriented towards richly formatted documents from untrusted sources that require CSS and a full tag-set. This library can be configured to accept a more restrictive set of tags, but it won't be as efficient as more bare-bones parsers. It will, however, do the job right, which may be more important.

Places to go:

  • See INSTALL for a quick installation guide
  • See docs/ for developer-oriented documentation, code examples and an in-depth installation guide.
  • See WYSIWYG for information on editors like TinyMCE and FCKeditor

HTML Purifier can be found on the web at: http://htmlpurifier.org/

Installation

Package available on Composer.

If you're using Composer to manage dependencies, you can use

$ composer require sank3/htmlpurifier