phith0n / xsshtml Goto Github PK
View Code? Open in Web Editor NEWphp富文本过滤类，XSS Filter
Home Page: http://phith0n.github.io/XssHtml
xsshtml's Introduction
Written by Phithon <[email protected]> in 2014 and placed in the public domain. phithon <[email protected]> 编写于20140621 From: XDSEC <www.xdsec.org> & 离别歌 <www.leavesongs.com> Usage: <?php require('xsshtml.class.php'); $html = '<html code>'; $xss = new XssHtml($html); $html = $xss->getHtml(); ?> 需求： PHP Version > 5.0 浏览器版本：IE7+ 或其他浏览器，无法防御IE6及以下版本浏览器中的XSS 更多使用选项见 http://phith0n.github.io/XssHtml
xsshtml's People
Contributors
Stargazers
Watchers
Forkers
bashb0y yinyue zsxsoft-deprecated litdgfb jianhuihi w708833018 ltre kinsonyang yanliyanli noscripter 0x-jin hack2012 pekita1 mrsup jackycgq zhangweiwei0326 neilgle kslinf wonderkun hellosee baiban1993 h1d3r jianingguo guoyu07 tangbao iicoming luckywinbond lymallor findys siwufeiwu shuang920 w2yn netstao rurikaxx bendawang shellb0y zjgwhcn nash-x9 m9rco explorezone goomor gaoyia feraner bla-zeyan llane00 hakiu moskoo leepenn slog-ltd duzhenlin an625446161 wdkwdkwdk secsystem yhdsirxsshtml's Issues
为什么纯文本过滤后会自动加上p标签?
比如 转义前 : '你好啊'
转以后: '
你好啊
'能不能不加p标签
如何修改代码呢
求帮忙
有未过滤的危险标签
<img src=# onerror="alert(1)">各种建议什么的
嘛……感谢作者带来的代码……
首先有两个建议：
- __true_url加入ed2k和ftp协议的识别
- __node_a加入rel="nofollow"
个人认为第一项让程序相对更完善，第二项应该是必备……
然后如果可以的话，不如加入CSS属性白名单过滤功能吧，以避免页面排版混乱什么的……【我在开发中为了避免麻烦直接上了正则……（反正就两条）】
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.