module

Filters

Class methods

encode_angles(str : String) : String

HTML entity encode angle brackets (allows attribute-context bypass)

Source
escape_double_quote(str : String) : String
Source
escape_quotes(str : String) : String
Source
escape_single_quote(str : String) : String
Source
strip_angles(str : String) : String
Source
strip_event_handlers(str : String) : String

Strip event handlers (onclick, onerror, etc.)

Source
strip_js_protocol(str : String) : String

Strip javascript: protocol

Source
strip_keyword_ci(str : String, keyword : String) : String

Case-insensitive keyword removal (bypassable via mixed case encoding)

Source
strip_keyword_recursive(str : String, keyword : String) : String

Recursive keyword removal (handles double-insertion like <script>)

Source
strip_parens(str : String) : String
Source
strip_spaces(str : String) : String
Source
strip_tags(str : String, tags : Array(String)) : String

Tag blacklist filter (removes specific tags but allows others)

Source
whitelist_tags(str : String, allowed : Array(String)) : String

Whitelist filter (removes all tags except allowed ones)

Source