PHP Markdown XSS Sanitizer -


i'm looking simple php library helps filter xss vulnerabilities in php markdown output. i.e. php markdown parse things such as:

[xss vulnerability](javascript:alert('xss')) 

i've been doing reading around , best i've found on subject here this question.

although html purifier looks best (nearly only) solution wondering if there out there more general? html purifier seems bit robust needs, pain configure, though looks it'd work excellent after doing so.

is there else out there may little less robust , configurable still solid job? or should dig in , start trying configure html purifier needs?

edit clarity: i'm not looking cut corners or of like. html purifier offers lot of fine grained control , simple small project control isn't needed, though using nothing isn't option either. coming when asking simpler or less robust.

also final note, i'm not looking suggestions use htmlspecialchars(), strip_tags() or of like. disallow imbedded html in php markdown sanitizing in similar fashion. i'm looking ways prevent xss vulnerabilities in php markdown output.

thanks.

i've never heard of other tool html purifier, -- , html purifier indeed have reputation.

maybe it's "a bit robust" , "a pain configure", yes ; it's used, , tested, solution available in php ;; , important criteria when have choose such important component.

even if means investing half day configure properly, if in situation, choose html purifier.


Comments

Popular posts from this blog

blackberry 10 - how to add multiple markers on the google map just by url? -

php - guestbook returning database data to flash -

delphi - Dynamic file type icon -