PHP-Klasse::HTML Sanitizer 06.03.2007
Kurzbeschreibung: Remove unsafe tags and attributes from HTML code
Veröffentlicht am: 06.03.2007
Gruppe(n):
- HTML
- Security
Beschreibung:
This class can be used to remove unsafe tags and attributes from HTML code.
It takes a string with HTML code and strips all the tags that do not make part of a list of safe tags. That list of safe tags is defined as a private class variable. There are some functions to allow usually unsafe tags like script, style, object, embed, etc..
The class can also remove unsafe tag attributes, such as those that define Javascript code to handle events.
The links href attributes also gets special treatment to remove URLs that trigger Javascript code execution and line breaks.
Link: HTML Sanitizer