owlgrin/xss

Xss Sanitizer for Laravel

Laravel Xss

This package is the custom port of Codeigniter's Xss class., _(*1)

Installation

Require the package in composer.json:, _(*2)

"owlgrin/xss": "0.1.*"

Then, include the following in the array on service providers in config/app.php:, _(*3)

'Owlgrin\Xss\XssServiceProvider',

And, if you want to use it as facade, bind the facade in facade's array in config/app.php:, _(*4)

'Xss'            => 'Owlgrin\Xss\XssFacade',

Usage

You can clean your input HTML code from Xss attacks using the clean() method:, _(*5)

<?php

$input = Input::get('html');

$cleanedHtml = Xss::clean($input);

If you want to conserve some custom tags that the stripper strips, you can pass them in array as second argument:, _(*6)

<?php

$input = Input::get('html');

$cleanedHtml = Xss::clean($input, ['iframe']);