Jump to content

HTML sanitization

Edit links
From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by AvicAWB (talk | contribs) at 07:59, 2 September 2011 (clean up using AWB). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

HTML sanitization is the process of examining an HTML document and producing a new HTML document that preserves only whatever tags are designated "safe". HTML sanitization can be used to protect against cross-site scripting and SQL injection attacks by sanitizing any HTML code submitted by a user.

Tags often allowed are <b>, <i>, <u>, <em>, and <strong>.

In PHP this can be performed using the strip_tags() function.[1]

References

  1. ^ http://www.php.net/strip_tags


Stub icon

This Web-software-related article is a stub. You can help Wikipedia by expanding it.

Retrieved from "https://en.wikipedia.org/w/index.php?title=HTML_sanitization&oldid=448005527"