java-html-sanitizer

Tech stack & purpose

The OWASP Java HTML Sanitizer is a fast and configurable Java library that sanitizes third-party HTML to make it safe for embedding in web applications while protecting against cross-site scripting (XSS) attacks. Built in Java with a minimal compile-time dependency on JSR 305 for annotations, the project provides prepackaged policies for common use cases as well as a flexible policy builder API that allows developers to define custom sanitization rules at the element and attribute levels. The code was developed with security best practices in mind, includes an extensive test suite, and has undergone adversarial security review. The project is maintained under the Apache 2.0 License and welcomes community contributions through issue reports and pull requests.

Languages

Contributors (top 30 of 35)

• Mike Samuel299 commits
• mikesamuel189 commits
• Jim Manico16 commits
• Andres Almiray13 commits
• Sven Strickroth11 commits
• 
  actions-user6 commits · 5,514 followers
• Cure536 commits
• csware6 commits
• manico.james@gmail.com4 commits
• melloware3 commits
• subbudvk3 commits
• aakritisi2 commits
• 
  dependabot[bot]2 commits · 0 followers
• Woodgett2 commits
• Melloware2 commits
• Ronan1 commits
• Jøran Vagnby Lillesand1 commits
• Sergio del Amo1 commits
• Chuck Dumont1 commits
• edbaker831 commits
• yangbongsoo1 commits
• Prakhar Maurya1 commits
• José Pintado1 commits
• Jed Danner1 commits
• James Daily1 commits
• strangelookingnerd1 commits
• Juozas Šalna1 commits
• 0xflotus1 commits
• Claudio Weiler1 commits
• mymhealthltd-joshengland1 commits