GitHub - ymakux/xss: PHP filter class to prevent cross-site-scripting (XSS) vulnerabilities. Removes dangerous tags and protocols from HTML. The main difference between this class and strip_tags() or filter_var() is that you can preserve certain tags AND sanitize their attributes. Port of Drupal's XSS filter

This repository has been archived by the owner on Jan 20, 2024. It is now read-only.

ymakux / xss Public archive

Notifications You must be signed in to change notification settings
Fork 8
Star 21

PHP filter class to prevent cross-site-scripting (XSS) vulnerabilities. Removes dangerous tags and protocols from HTML. The main difference between this class and strip_tags() or filter_var() is that you can preserve certain tags AND sanitize their attributes. Port of Drupal's XSS filter

GPL-2.0 license

21 stars 8 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
Filter.php		Filter.php
LICENSE		LICENSE
README.txt		README.txt

Repository files navigation

$filter = new Filter();

$allowed_protocols = array('http', 'ftp', 'mailto');
$allowed_tags = array('a', 'i', 'b', 'em', 'span', 'strong', 'ul', 'ol', 'li', 'table', 'tr', 'td', 'thead', 'th', 'tbody');

$filter->addAllowedProtocols($allowed_protocols);
$filter->addAllowedTags($allowed_tags);

$filtered_string = $filter->xss($string);