Download the PHP package rhukster/dom-sanitizer without Composer

On this page you can find all versions of the php package rhukster/dom-sanitizer. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of rhukster/dom-sanitizer

Informations about the package dom-sanitizer

DOMSanitizer

A simple but effective DOM/SVG/MathML Sanitizer for PHP 7.3+. This was created due to my requirements for a performant DOM and specifically SVG sanitizer that was MIT compatible.

This borrows the extensive list of valid tags and attributes in the excellent DOMPurify library for JavaScript, but uses PHP DOMDocument to parse the DOM and filter out dangerous tags and attributes.

Installation

Options

Options can be passed to the sanitize() method as an optional array. Default values are:

Usage

Sanitizing HTML

The default option but provides with the full list of HTML tags and attributes.

Sanitizing SVG

You can limit the valid tags and attributes by passing DOMSanitizer::SVG to the constructor. This is advisable if you know you are dealing with SVGs.

Processing instructions and comments are removed, and CDATA content is preserved as escaped text, so these XML constructs cannot hide HTML markup when sanitized SVG is embedded inline. These checks also apply to MathML and do not depend on the output options.

Animations targeting URL attributes (including href and xlink:href), event handlers, style, or XML namespace declarations are removed entirely, even if their values appear harmless. Normal transform, color, and motion animations remain supported.

Sanitizing MathML

You can limit the valid tags and attributes by passing DOMSanitizer::MATHML to the constructor. This is advisable if you know you are dealing with MathML code.

Modifying the allowed tags and attributes

You have full access to the tags and attributes via the following methods:

All versions of dom-sanitizer with dependencies

PHP Build Version
Package Version
Requires php Version >=7.3
ext-dom Version *
ext-libxml Version *
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package rhukster/dom-sanitizer contains the following files

Loading the files please wait ...