voku/anti-xss
PHP AntiXSS library to sanitize untrusted HTML and prevent XSS attacks. Cleans input by removing dangerous tags/attributes, filters CSS/JS vectors, and supports UTF-8 and common encodings. Useful for safely handling user-generated content in apps.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| laminas/laminas-escaper | 0.85 | Securely escape untrusted data for HTML, HTML attributes, JavaScript, CSS, and URLs to prevent XSS. Laminas Escaper provides robust, context-aware escaping utilities for PHP apps and templates. | 222 | 222 | 23 | 2M | 6 | 14.7 | 59.4 | BSD-3-Clause | 7 months ago | |
| voku/portable-ascii | 0.83 | PHP 7+ library to transliterate Unicode to portable ASCII for slugs, URLs, and safe filenames. Works without mbstring/iconv, lightweight and easy to bundle. Based on Unidecode/Stringy-style mappings with handy helper methods. | 574 | 578 | 48 | 11M | 17 | 10.0 | 62.4 | MIT | — | |
| ezyang/htmlpurifier | 0.81 | HTML Purifier is a robust HTML filtering library that prevents XSS using strict whitelists and aggressive parsing, producing standards-compliant output. Ideal for richly formatted, untrusted HTML with configurable tag and CSS support. | 3,348 | 3,447 | 354 | 8M | 108 | 55.9 | 72.1 | LGPL-2.1 | 7 months ago | |
| aimeos/sanitizer | 0.78 | Laravel package providing data sanitization helpers: clean and normalize input, strip unwanted characters/tags, and validate common formats. Useful for securing request data and preparing values for storage, APIs, and user-facing output. | 165 | 164 | 0 | 1K | 0 | 0.8 | 13.7 | LGPL-2.1 | — | |
| rhukster/dom-sanitizer | 0.78 | MIT-licensed PHP 7.3+ DOM/SVG/MathML sanitizer using DOMDocument and DOMPurify-based allowlists. Remove dangerous tags/attributes, strip namespaces and PHP/HTML/XML tags, and optionally compress output. Supports HTML, SVG, and MathML modes. | 11 | 11 | 4 | 143K | 0 | 21.9 | 64.1 | MIT | 1 month ago | |
| fossar/htmlawed | 0.78 | Fork of kesar/HTMLawed maintained by selfoss and wallabag. A single-file (~45KB) PHP HTML filter/sanitizer that secures and tidies user input, making it standards-compliant for HTML/XHTML/XML, with extensive customization options. | 2 | 2 | 2 | 8K | 0 | 2.5 | 46.6 | GPL-2.0 | 2 years ago | |
| voku/portable-utf8 | 0.77 | High-performance UTF-8 helper library for PHP with portable polyfills for mbstring and intl features. Provides fast string operations, validation, normalization, encoding fixes, and safe text handling across environments without extra extensions. | 520 | 523 | 91 | 385K | 2 | 6.1 | 41.1 | Apache-2.0 | — | |
| masterminds/html5 | 0.75 | Standards-compliant HTML5 parser and serializer for PHP. Provides SAX-like event parsing, DOM tree building, namespace support, Composer install, and interoperability with QueryPath. Stable and widely used in production. | 1,781 | 1,797 | 121 | 8M | 29 | 33.6 | 63.1 | NOASSERTION | 10 months ago | |
| coduo/php-humanizer | 0.75 | Humanize and format values for people: turn field names into readable labels, truncate plain text or HTML safely to word boundaries, and handle common string transformations. Lightweight PHP utility with simple static APIs. | 1,669 | 1,673 | 109 | 18K | 0 | 29.7 | 16.0 | MIT | 5 months ago | |
| anahkiasen/underscore-php | 0.64 | Underscore.php brings functional helpers to PHP inspired by Underscore.js. Chainable, collection and array utilities like map, filter, reduce, groupBy, sortBy, pluck, and more. Handy for concise data manipulation in any PHP project, including Laravel. | 1,110 | 1,108 | 89 | 31K | 29 | 8.8 | 22.3 | — | — | |
| spatie/shiki-php | 0.63 | Use Shiki syntax highlighting from PHP. Highlight code snippets with editor-quality themes and 100+ languages, plus Antlers and Blade. Works great with Laravel via spatie/laravel-markdown and CommonMark through a companion extension. | 310 | 312 | 31 | 2M | 0 | 28.3 | 60.6 | MIT | 1 month ago |
How can I help you explore Laravel packages today?