awesome-php VS HTML Purifier

7. Awesome PHP - Awesome PHP is a curated list of amazingly awesome PHP libraries, resources, and tools. It's a great resource for finding solutions to PHP-related problems.

+1 to "Php the right way" I would also recommend Awesome PHP https://github.com/ziadoz/awesome-php

import jinja2 template = jinja2.Template(""" # Awesome Big Data A curated list of awesome big data frameworks, libraries, software and resources. Inspired by [awesome-php](https://github.com/ziadoz/awesome-php). """) template.render()

A big list of awesome PHP things: https://github.com/ziadoz/awesome-php

awesome-php has a list of code analysers.

HTML Purifier

On the homepage of http://htmlpurifier.org the last update is of december 2021. I didn’t think of checking GitHub. Thanks for the info!

For HTML specifically, HTMLPurifier is pretty well known.

There are several third party PHP libraries which are commonly used to assist in XSS prevention. Examples👇 HTML Purifier – here PHP Anti-XSS – here htmLawed – here

You need to filter the received HTML code and remove the tags and attributes you don't allow. The easiest way to do this is to use htmlpurifier. Otherwise you have to manually cleanup the HTML by using strip_tags and maybe some xml parsing (or regex) to remove unwanted attributes.

Or HTMLPurifier.

Definitely, its one of the best http://htmlpurifier.org/

Popular Packages & Tools - The League of Extraordinary Packages - Twig Templating engine - PHP Mailer - SwiftMailer - Flysystem file storage - PHPUnit testing - HTML Purifier

Check out this lib: http://htmlpurifier.org/. It is widely used in the PHP World.