aimeos/sanitizer

Permissive sanitizer removing potentially dangerous content

Maintainers

👁 aimeos

Package info

github.com/aimeos/sanitizer

pkg:composer/aimeos/sanitizer

Statistics

Installs: 8 513

Dependents: 1

Suggesters: 0

Stars: 170

Open Issues: 0

0.4 2026-06-13 08:37 UTC

Requires

Requires (Dev)

Suggests

None

Provides

None

Conflicts

None

Replaces

None

LGPL-2.1+ 8113646929f2a87dbf783c0f1f095c8e2d6d97a5

This package is auto-updated.

Last update: 2026-06-13 08:38:03 UTC

README

Permissive sanitizer removing potentially dangerous content.

Installation

composer req aimeos/sanitizer

Usage

$input = '
 <svg><circle cx="50" cy="50" r="40" /></svg>
 <script>alert(1)</script>
 <a href="javascript:alert(2)" style="color:red;" onclick="alert(3)">Click me</a>
 <img src="data:image/png;base64,..." />
';
echo \Aimeos\Sanitizer\Sane::html( $input );

// Output: <a>Click me</a><img>

Specification

HTML

Removes these potential dangerous content:

  • Elements: 'embed', 'frame', 'iframe', 'object', 'script', 'svg'
  • Attributes: All that can execute code
  • URI schemes: 'javascript', 'data', 'vbscript', 'file', 'filesystem', 'blob'
  • IDs and names: Names used for global JS objects