Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

medilies's avatar

A new Rich text sanitization package

Hello PHP devs,

I recently released this package https://github.com/medilies/xssless which I propose as an alternative to HTMLPurifer for preventing XSS. The value it offers is:

  1. It uses the library recommended by OWASP under the hood (Dompurify).
  2. It doesn't burden scalability with whitelisting configs if your only concern is XSS.
  3. It supports HTML5.
  4. Built-in Laravel integration.
  5. Extensible to support more drivers.

Feel very welcome to give feedback or contribute. And a star would be much appreciated if you see it worth it :)

0 likes
0 replies

Please or to participate in this conversation.