anti-xss
https://github.com/voku/anti-xss
PHP
㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
PHP not yet supported4 Subscribers
Add a CodeTriage badge to anti-xss
Help out
- Issues
- Prevent false-positive sanitization for benign `system (` text
- Add explicit UTF-8-only usage warning for anti-xss (direct and transitive use)
- [WIP] Fix JSON encoded HTML attribute issues
- Add regression coverage for `isXssFound()` on Example 6 hex-escaped script payload
- Prevent false-positive sanitization of plain-text `Behavior:` while keeping `behavior:url(...)` blocked
- Harden CSS `expression()` detection against obfuscated `expres\sion` style payloads
- Docs
- PHP not yet supported