HTML sanitization: Difference between revisions

Revision as of 22:16, 22 January 2019

Revision as of 04:36, 26 June 2020

Line 10:

== Implementations ==

In [[PHP]], HTML sanitization can be performed using the <code>strip_tags()</code> or <code> htmlspecialchars()</code> function at the risk of removing all textual content following an unclosed less-than symbol or angle bracket.<ref>{{cite web|url=http://us3.php.net/manual/en/function.strip-tags.php|title=strip_tags|publisher=PHP.NET}}</ref> The HTML Purifier library is another popular option for PHP applications.<ref>http://www.htmlpurifier.org</ref>

In [[Java (programming language)|Java]] (and [[.NET Framework|.NET]]), sanitization can be achieved by using the [[OWASP]] Java HTML Sanitizer Project.<ref>https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project</ref>