Text.HTML.SanitizeXSS

Sanatize HTML to prevent XSS attacks.

See README.md http://github.com/gregwebs/haskell-xss-sanitize for more details.

Sanitize

sanitize :: Text -> Text

Sanitize HTML to prevent XSS attacks. This is equivalent to filterTags safeTags.

sanitizeBalance :: Text -> Text

Sanitize HTML to prevent XSS attacks and also make sure the tags are balanced. This is equivalent to filterTags (balanceTags . safeTags).

sanitizeXSS :: Text -> Text

alias of sanitize function

Custom filtering

filterTags :: ([Tag Text] -> [Tag Text]) -> Text -> Text

Parse the given text to a list of tags, apply the given filtering function, and render back to HTML. You can insert your own custom filtering, but make sure you compose your filtering function with safeTags or safeTagsCustom.

safeTags :: [Tag Text] -> [Tag Text]

Filters out unsafe tags and sanitizes attributes. Use with filterTags to create a custom filter.

safeTagsCustom

Arguments

:: (Text -> Bool)

Select safe tags, like safeTagName

-> ((Text, Text) -> Maybe (Text, Text))

Sanitize attributes, like sanitizeAttribute

-> [Tag Text]

-> [Tag Text]

Filters out unsafe tags and sanitizes attributes, like safeTags, but uses custom functions for determining which tags are safe and for sanitizing attributes. This allows you to add or remove specific tags or attributes on the white list, or to use your own white list.

safeTagsCustom safeTagName sanitizeAttribute is equivalent to safeTags.

Since: xss-sanitize-0.3.6

balanceTags :: [Tag Text] -> [Tag Text]

Filter which makes sure the tags are balanced. Use with filterTags and safeTags to create a custom filter.

Utilities

safeTagName :: Text -> Bool

sanitizeAttribute :: (Text, Text) -> Maybe (Text, Text)

low-level API if you have your own HTML parser. Used by safeTags.

sanitaryURI :: Text -> Bool

Returns True if the specified URI is not a potential security risk.