HTML Filtering To Secure Websites With HTML Purifier

Secure input and data handling is hard when it comes to HTML because of many different types of malicious code (XSS).

HTML Purifier is a well documented, standards-compliant HTML filter library written in PHP. It simply:

• Removes all malicious code (better known as XSS) with an audited, secure yet permissive whitelist.
  

• Makes sure your documents are standards compliant.

(more...)