voku/anti-xss-twig

Twig extension for XSS protection.

, _(*1)

AntiXSS for Twig

Description

A Twig extension for voku/anti-xss., _(*2)

Currently supported Twig features are:, _(*3)

• Tag (recommended)
  • {% xss_clean %} <foo>bar</foo> {% end_xss_clean %}
• Function
  • {{ xss_clean(' <foo>bar</foo>') }}

• Filter, _(*4)

  • {{ '<foo>bar</foo>' | xss_clean }}

• Installation, _(*5)
• Usage
• History

Installation

1. Install and use composer in your project.
2. Require this package via composer:

composer require voku/anti-xss-twig

Usage

First register the extension with Twig:, _(*6)

use voku\helper\AntiXSS;
use voku\twig\AntiXssExtension;

$twig = new Twig_Environment($loader);
$antiXss = new AntiXSS();
$twig->addExtension(new AntiXssExtension($antiXss));

Then use it in your templates:, _(*7)

{% xss_clean %} <foo>bar</foo> {% end_xss_clean %}

$twig->addExtension(new AntiXssExtension($antiXss));

History

See CHANGELOG for the full history of changes., _(*8)