HTML Purifier
A standards-compliant HTML filtering library for PHP that removes malicious code while preserving safe markup.
What is HTML Purifier?
HTML Purifier is a PHP library that filters and sanitizes HTML input to remove malicious code while preserving safe, standards-compliant markup. It prevents cross-site scripting (XSS) attacks by using whitelists and aggressive parsing techniques, ensuring that user-generated HTML is both secure and valid according to W3C specifications.
PHP developers building applications that accept HTML input from users, such as content management systems, forums, comment systems, or any web platform where rich text formatting is allowed.
Developers choose HTML Purifier because it provides a reliable, standards-compliant solution for HTML sanitization that balances security with the need to preserve legitimate formatting, unlike simpler parsers that might break valid HTML or miss sophisticated attacks.
Overview
Standards compliant HTML filter written in PHP
Use Cases
Best For
- Sanitizing user-generated HTML in PHP applications to prevent XSS attacks
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
