xssless

Clean your rich text from XSS threats Why use Xssless Your application features a Rich Text Editor and you want to prevent all XSS. You want full HTML5 & CSS3 support. You want to allow all safe HTML elements, their attributes, and CSS properties without going deep into whitelist configs. The default driver aligns with OWASP recommendations: ... OWASP recommends DOMPurify for HTML Sanitization. Requirements PHP >= 8.2 ext-json Node >= 18 NPM Installation Install the package via composer: For non Laravel projects, pick a config and run the following code: For Laravel projects, run the following command: Usage Using Medilies\Xssless\Dompurify\DompurifyCliConfig: Using Medilies\Xssless\Dompurify\DompurifyServiceConfig: Laravel usage You can publish the config file with: This is the contents of the published config file: Run the following command (Not required by all drivers): Use the facade: Changelog Please see CHANGELOG for more information on what has changed recently. Contributing Please see CONTRIBUTING for details. Security Vulnerabilities Please review our security policy on how to report security vulnerabilities. Credits medilies All Contributors License