Guymon

Joomla: HTML Filter

Cool, das ist mir bislang noch gar nicht aufgefallen:

Specifically interesting is the new article HTML Filtering system. You can now filter out specific tags in your articles automatically; this is great because you can avoid your contributors publishing erroneous or potentially harmful bits of code, as well as choose which user groups are allowed to post full HTML (for limiting 3rd party video embeds etc).

Input filter/sanitizer/purifier: htmLawed

Mal wieder was zum testen: htmLawed

htmLawed is a single-file PHP software that makes input text more secure and standard-compliant, and suitable in general from the viewpoint of a web-page administrator, for use in the body of HTML 4, or XHTML 1 or 1.1 documents. It thus is a customizable HTML/XHTML filter, processor, purifier, sanitizer, etc., like the Kses, HTMLPurifier, etc., PHP scripts.

Einige Features:

• proper closure of empty elements like img
• deprecated elements like u can be transformed
• removal of invalid attributes
• deprecated attributes can be transformed
• unique id attribute values can be ensured
• non-numeric, named character entities not in the HTML standard are neutralized
• characters from Microsoft applications like Word that are discouraged in HTML or XML can be replaced with good ones

Inspekt - PHP Input Filter

Klingt interessant.

Inspekt is an input filtering and validation library for PHP4 and PHP5.

Driving principles behind Inspekt

1. Accessing user input via the PHP superglobals is inherently dangerous, because the “default” action is to retrieve raw, potentially dangerous data
2. Piecemeal, “inline” filtering/validation done at various places in an application’s source code is too error-prone to be effective
3. The purpose of a library or framework is to make a programmer’s job easier. Verbose and/or complex solutions should be avoided unless they are the only solution

Features of Inspekt

• ‘Cage’ objects that encapsulate input and require the coder to use the provided filtering and validation methods to access input data
• Automatic application of filtering as defined in a configuration file
• A library of static filtering and validation methods
• A simple, clear API
• No external dependencies