Wednesday, January 16, 2008
Purifying user input using htmLawed
The htmLawed PHP script can be used to not only remove cross-site scripting (XSS) attacks, but also restrict HTML elements (and attributes, URL protocols, etc.), transform character entities and deprecated HTML markup, balance tags, and so on. You might be interested in this highly configurable software if you administer a blog, wiki, forum or CMS.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment