jace 3129c4f082 增加文件 7 years ago
..
extras 3129c4f082 增加文件 7 years ago
library 3129c4f082 增加文件 7 years ago
maintenance 3129c4f082 增加文件 7 years ago
plugins 3129c4f082 增加文件 7 years ago
tests 3129c4f082 增加文件 7 years ago
CREDITS 3129c4f082 增加文件 7 years ago
INSTALL 3129c4f082 增加文件 7 years ago
INSTALL.fr.utf8 3129c4f082 增加文件 7 years ago
LICENSE 3129c4f082 增加文件 7 years ago
NEWS 3129c4f082 增加文件 7 years ago
README.md 3129c4f082 增加文件 7 years ago
TODO 3129c4f082 增加文件 7 years ago
VERSION 3129c4f082 增加文件 7 years ago
WHATSNEW 3129c4f082 增加文件 7 years ago
WYSIWYG 3129c4f082 增加文件 7 years ago
composer.json 3129c4f082 增加文件 7 years ago
package.php 3129c4f082 增加文件 7 years ago
phpdoc.ini 3129c4f082 增加文件 7 years ago
release1-update.php 3129c4f082 增加文件 7 years ago
release2-tag.php 3129c4f082 增加文件 7 years ago
test-settings.sample.php 3129c4f082 增加文件 7 years ago
test-settings.travis.php 3129c4f082 增加文件 7 years ago

README.md

HTML Purifier Build Status

HTML Purifier is an HTML filtering solution that uses a unique combination of robust whitelists and agressive parsing to ensure that not only are XSS attacks thwarted, but the resulting HTML is standards compliant.

HTML Purifier is oriented towards richly formatted documents from untrusted sources that require CSS and a full tag-set. This library can be configured to accept a more restrictive set of tags, but it won't be as efficient as more bare-bones parsers. It will, however, do the job right, which may be more important.

Places to go:

  • See INSTALL for a quick installation guide
  • See docs/ for developer-oriented documentation, code examples and an in-depth installation guide.
  • See WYSIWYG for information on editors like TinyMCE and FCKeditor

HTML Purifier can be found on the web at: http://htmlpurifier.org/

Installation

Package available on Composer.

If you're using Composer to manage dependencies, you can use

$ composer require "ezyang/htmlpurifier": "dev-master"