Home » HTML » HTML_Safe
This parser strips down all potentially dangerous content within HTML
This package is unmaintained.
Download latest release 0.10.1 (archived versions might be outdated)
License: BSD (3 Clause)
Description
This parser strips down all potentially dangerous content within HTML
Maintainers
- Miguel Vazquez Gocobachi (demrit) — lead, active
Dependencies
Required
- PHP (>= 5.2)
- PEAR Installer (>= 1.6)
- XML_HTMLSax3 (>= 3.0.0RC1)
Releases
- 0.10.1 (beta, 2010-08-03)
Release notes
License: BSD (3 Clause)
* UTF-7 XSS vulnerability fixed
- 0.10.0 (beta, 2010-04-06)
- 0.9.9beta (beta, 2005-12-21)
- 0.9.0alpha1 (alpha, 2005-09-06)
- 0.3.5 (alpha, 2005-09-04)
Bugs
| ID | Status | Type | Version | Date | Summary |
|---|---|---|---|---|---|
| #6900 | Analyzed | Bug | 0.9.9beta | 2006-02-23 | HTML_Safe destroys formatting by moving end tags in the wrong places |
| #7027 | Closed | Req | 0.9.9beta | 2006-03-05 | Whitelisting of HTML elements |
| #7424 | Closed | Bug | 0.9.9beta | 2006-04-19 | a+b-c parses to ac |
| #9733 | Suspended | Req | 2007-01-04 | Security hole | |
| #16510 | Closed | Req | SVN | 2009-08-10 | HTML_Safe for PHP 5.3 strict |
| #17645 | Closed | Bug | 0.10.0 | 2010-07-30 | UTF-7 XSS |
| #18027 | Assigned | Req | 0.10.1 | 2010-11-05 | script is vulnerable to XSS via use of svg/animate tags |
| #20116 | Closed | Bug | 0.10.1 | 2013-11-04 | package.xml does not validate |
| #20195 | Verified | Bug | 0.10.1 | 2014-02-09 | Package fails its test suite |
| #20219 | Analyzed | Bug | 2014-03-15 | Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_cal | |
| #21059 | Open | Req | 0.10.1 | 2016-04-29 | new HTML5 Block-level elements patch |