Forums / Suggestions / htmLawed to filter/purify user input
S P
Tuesday 15 January 2008 5:03:10 pm
Developers might be interested in <i>htmLawed</i>, a 45-kb, single-file, non-OOP, GPLv3-licensed script with low basal memory usage (0.5 MB) to filter illegal/disallowed HTML (tags, attributes, etc.) from user input. It also reduces XSS vulnerabilities, balances tags, etc.
See http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/index.php for more and for online demos.
Xavier Dutoit
Thursday 07 February 2008 3:41:31 am
This is an extension that does that (based on another library)
http://projects.ez.no/xmlwash
http://www.sydesy.com
Monday 11 February 2008 2:01:45 pm
htmLawed has much more features than xmlwash like transformation of tags or attributes, restrictions on attributes, character entity checks and transformations, proper nesting of HTML elements, etc.
Also see <a href="http://htmlpurifier.org/comparison.html#HTML_Safe">this page</a>.
Wednesday 20 February 2008 2:36:41 pm
Oops, my bad, I thought it was a genuine question and not a plug for your product, thanks to have corrected me by pasting the list of feature without reading my answer ;)
Your program is the best, of course.
X+
Sunday 24 February 2008 12:37:01 pm
Mr. Dutoit,
I don't know why you are being so cynical and sarcastic. I was only informing about a simple, open-sourced script with a broad range of capabilities that would be of interest to eZ users.
You have a wrong attitude, one that doesn't befit a forum moderator.
This is my last post here, so feel free to remove this thread or close my account.
Monday 25 February 2008 10:55:29 pm
Hi,
The xmlwash extension is just a wrapper around another external library, hence when you compared it to your library providing a long list of your extra features, I thought you just replied randomly (still not convinced you looked long at it before judging what features one had and the other didn't).
Beside that, that's probably a few lines modification to integrate your library into it, and it seems indeed to handle some things better. If one is willing to dig into it, feel free ;)
As for my tone, I was trying to be more ironic than cynical ;) I suspect I read your post while having the "pleasure" to browse a forum full of random posts promoting various soft.
Sorry, it looks I throw the stone in the wrong direction. And that's not because I've been un needingly aggressive that I should hide it by deleting this thread.