This package can be used to filter or purify HTML to prevent security attacks and for compliance with standards including HTML 5 and admininstration policies.
It can parse HTML documents and rewrite it to filter tags and data that could be used to perform cross-site scripting (XSS) attacks.
The filtered tags and data can be controlled by black and white lists that define which tags, attributes and URL protocols that can be included or should be excluded.
The rewritten HTML can also be made XHTML-compliant. |
