Jump to content

HTML sanitization

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by 217.118.209.33 (talk) at 08:56, 16 May 2011 (Added text). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

HTML sanitization is the process of examining an HTML document and producing a new HTML document that preserves only whatever tags are designated "safe". HTML sanitization can be used to protect against cross-site scripting and SQL injection attacks by sanitizing any HTML code submitted by a user.

Tags often allowed are <b>, <i>, <u>, <em>, and <strong>.