htmlpurifier icon indicating copy to clipboard operation
htmlpurifier copied to clipboard

Standards compliant HTML filter written in PHP

Results 120 htmlpurifier issues
Sort by recently updated
recently updated
newest added

This is more of a feature request. We're migrating our app from PHP 5.5 => PHP 7+ and are checking if we use incompatible libraries. While running a search for...

Hi @ezyang , I am trying to purify html character entities e.g. < however in latest version v4.10.0, it encounters an error. The error is from the entityParser as key...

XML namespaces/prefixes (`` and `xmlns:namesapace="..."` attribute) are not currently supported. Is support planned?

Attributes are trimmed down by default. I understand this is a desirable behavior in regard to cleaning content, but this doesn't allow for explicitly whitespace-only attributes (e.g. https://www.w3.org/Math/testsuite/mml2-testsuite/Presentation/GeneralLayout/mfenced/mfencedAempty.xml). Is there...

Currently, attribute names are not allowed to have uppercase letters (they are converted to lowercase). This got in the way of the implementation of the MathML `definitionURL` attribute in `csymbol`...

Using PHP 7 the output of `René & Danny` is `René & Danny` instead of the expected `René & Danny`. It's a specific character combination, you can test it using...

I have the following simplified PHP code, the HTML is coming from an untrusted source, and needs to be purified. This is a minimal example which reproduces the problem, my...

confirmed

Just like https://github.com/ezyang/htmlpurifier/pull/87 did for 'tel' but for then for the proposed standard 'sip'. Use case: our customer asks to allow the 'sip' protocol so she can make links that...

I have added a whitelist option to htmlpurifer with and wihout a tld `$config->set('HTML.TargetWhitelist', array('domain1.de','domain2.'));` Reason; you can have multiple domains for a single project or trusted(partner) domains. So here...

In some cases the purifier modifies the snippet even though it IS valid registering changes (=errors) in the ErrorCollector. **Example 1:** original snippet: `testlink` purified snippet: `testlink` In the case...