HTMLPurifier是一个用于过滤和规范化HTML的解决方案，它结合了强大的白名单和精确的解析，确保阻止XSS攻击并产生符合标准的HTML。此库适用于处理来自不可信源的格式丰富的文档，支持CSS和完整标签集。它可以配置为接受更严格的标签集，但效率可能不如简化解析器。然而，HTMLPurifier将正确完成工作，这在某些情况下可能更重要。适用于快速安装、开发者文档和WYSIWYG编辑器如TinyMCE和FCKeditor的信息。
HTML Purifier
HTML Purifier is an HTML filtering solution that uses a unique combination
of robust whitelists and aggressive parsing to ensure that not only are
XSS attacks thwarted, but the resulting HTML is standards compliant.
HTML Purifier is oriented towards richly formatted documents from
untrusted sources that require CSS and a full tag-set. This library can
be configured to accept a more restrictive set of tags, but it won't be
as efficient as more bare-bones parsers. It will, however, do the job
right, which may be more important.
Places to go:
See INSTALL for a quick installation guide
See docs/ for developer-oriented documentation, code examples and
an in-depth installation guide.
See WYSIWYG for information on editors like TinyMCE and FCKeditor
HTML Purifier can be found on the web at: http://htmlpurifier.org/
Installation
Package available on Composer.
If you're using Composer to manage dependencies, you can use
$ composer require ezyang/htmlpurifier
扫一扫
1011
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
