htmlpurifier icon indicating copy to clipboard operation
htmlpurifier copied to clipboard

Standards compliant HTML filter written in PHP

Results 137 htmlpurifier issues
Sort by recently updated
recently updated
newest added

The standalone version can no longer be generated as of [release v4.13.0](https://github.com/ezyang/htmlpurifier/releases/tag/v4.13.0). The maintainance script which generates the standalone version has been removed: ```sh php vendor/ezyang/htmlpurifier/maintenance/generate-standalone.php # Could not open...

Hi, We're currently using `HTML.SafeIframe` (along with `URI.SafeIframeRegexp`) to allow/whitelist YouTube and Vimeo videos and everything works well. That said, we now need to also allow `` tags, and only...

Hi, ``` I want to get the full HTML converted including the and tags. Is there any way to do this? ```

MakeWellFormed strategy when attempting to fix invalid markup messes it up even more. Please consider the following test script: ```php

We're currently updating our app to PHP 7.3, and we're finding some unit test failures that don't occur on PHP 7.1. It's reproducible just using this script ```

I've found a relative question but it doesn't solve my problem. [http://htmlpurifier.org/phorum/read.php?2,5611](url) In my html page i have some links like: ``` Link Link Link Link Link Link ``` I...

I'm currently trying to incorporate [rector](https://github.com/rectorphp/rector) into my projects, and it complains about: ``` Ambiguous class HTML5 resolution; defined in ./vendor/ezyang/htmlpurifier/maintenance/PH5P.php and in ./vendor/ezyang/htmlpurifier/library/HTMLPurifier/Lexer/PH5P.php. ``` Here's the offending code: https://github.com/ezyang/htmlpurifier/blob/fe0452d6887a0fa76e2eaf80166e1ea205e7bb81/library/HTMLPurifier/Lexer/PH5P.php#L70...

Hi, We had a fortify scan on our code base to check for possible security vulnerabilities and the following has been reported from this library, request you to look into...

When I send HTML containing ` some text ` to the HTML Purifier, it trims the 0 and returns ``. The html without the zero then does not work well...