AntiXSS
A PHP library that sanitizes user input to prevent Cross-Site Scripting (XSS) attacks.
What is AntiXSS?
AntiXSS is a PHP security library that sanitizes user input to protect web applications from Cross-Site Scripting (XSS) attacks. It cleans strings and arrays by removing or encoding malicious scripts, event handlers, and dangerous attributes, helping secure forms, URLs, and other user-supplied data. The library emphasizes proactive sanitization during data submission rather than runtime processing for robust security.
PHP developers building web applications that handle user-generated content, such as form submissions, comments, or dynamic HTML output, and need a dedicated tool to prevent XSS vulnerabilities. It is also suited for security-conscious teams integrating input sanitization into their data processing pipelines.
Developers choose AntiXSS for its thorough, configurable approach to XSS protection that goes beyond basic regex parsing, handling various encoding attempts like hexadecimal, Unicode, and inline CSS-based attacks. Its structured API allows fine-tuning of security rules, such as customizing evil HTML tags and attributes, and it includes detection features like isXssFound() to identify attacks.
Overview
㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
