PHP-Klasse::HTML Sanitizer 06.03.2007

abgelegt im Archiv PHP-Classes-News am 07.03.07

Kurzbeschreibung: Remove unsafe tags and attributes from HTML code

Veröffentlicht am: 06.03.2007

Gruppe(n):

• HTML


• Security

Beschreibung:

This class can be used to remove unsafe tags and attributes from HTML code.

It takes a string with HTML code and strips all the tags that do not make part of a list of safe tags. That list of safe tags is defined as a private class variable. There are some functions to allow usually unsafe tags like script, style, object, embed, etc..

The class can also remove unsafe tag attributes, such as those that define Javascript code to handle events.

The links href attributes also gets special treatment to remove URLs that trigger Javascript code execution and line breaks.

Link: HTML Sanitizer