htmLawed is a PHP script that makes input text more secure, HTML standards-compliant, and suitable in general from the viewpoint of a Web-page administrator, for use in the body of HTML 4 or XHTML 1 or 1.1 documents. It is a customizable HTML/XHTML filter, processor, purifier, and sanitizer. It can ensure that HTML tags are balanced and properly nested tags, neutralize code that may be used for cross-site scripting (XSS) attacks, and limit the allowed HTML elements, tags, attributes, or URL protocols.
| Tags | Internet Web Dynamic Content CGI Tools/Libraries Security Software Development Libraries php classes Text Processing Filters Markup HTML/XHTML |
|---|---|
| Licenses | LGPLv3 GPL v2 Or Later |
| Operating Systems | OS Independent |
| Implementation | PHP |
Recent releases


Release Notes: This is the current beta version for the upcoming version 1.2 of htmLawed with support for HTML5.


Release Notes: A fix for possible segmental loss of incremental indentation during tidying when the configuration parameter 'balance' is disabled. A fix for non-effectuation under some circumstances of a corrective behavior to preserve plain text within elements like 'blockquote' and 'form'.


Release Notes: This release adds a feature allowing the use of custom, non-standard attributes or custom rules for standard attributes in elements.


Release Notes: This release included a fix for a bug in identifying an unquoted value of the 'face' attribute during attribute transformation.


Release Notes: This release has a fix for a possible problem with handling of multi-byte characters in attribute values in an mbstring.func_overload enviroment. '$config["hook_tag"]', if specified, now receives names of elements in closing tags.