Symfony HTML Sanitizer

Allows precise allowance, blocking, or dropping of specific HTML elements and attributes, as shown with methods like allowElement() and blockElement() in the README.

Includes preset configurations like allowSafeElements() and allowStaticElements() that align with W3C Sanitizer API standards, offering a secure starting point out of the box.

Enforces HTTPS, restricts allowed schemes and hosts for links and media, and controls relative URLs, preventing malicious URL injections through methods like forceHttpsUrls().

Provides sanitizeFor() method to tailor HTML cleaning for contexts like 'head' or 'textarea', with appropriate encoding, as demonstrated in the usage examples.

Supports custom attribute sanitizers through AttributeSanitizerInterface, allowing developers to add specialized logic beyond built-in rules.