Java-Html-Sanitizer

Visit Tool

java-html-sanitizer is an open-source Coding & Development tool that takes third-party HTML and produces HTML safe to embed in web applications. It is fast and easy to configure, protecting against XSS.

Claim this tool

2Views

At a glance

Pricing

Open Source

Free tier

Yes

API

Skill level

Technical

About

What is java-html-sanitizer?

The OWASP Java HTML Sanitizer is an open-source library designed to protect web applications from Cross-Site Scripting (XSS) attacks by sanitizing untrusted HTML content. Written in Java, it offers a fast and easily configurable solution for developers to safely embed third-party HTML. The tool provides prepackaged policies for common sanitization needs, as well as the flexibility to craft custom policies for specific requirements, such as transforming elements or adding attributes. It also includes a preprocessor feature for structural changes before policy application and telemetry to track discarded elements or attributes, aiding in security monitoring. The project emphasizes security best practices, an extensive test suite, and adversarial security review.

Best used for

Ideal for developers who need to embed untrusted HTML content securely within their web applications, customize sanitization rules, and protect against XSS vulnerabilities. Especially valuable for projects requiring fine-grained control over HTML input and robust security measures.

Common actions

sanitize HTML

secure web applications

configure HTML policies

prevent XSS

collaborationlow-code/no-codeopen-sourcedeepfakeautomated workflowface swappinggithub copilotworkflows"AI Agents"

Capabilities

Key features

Sanitize third-party HTML
Prevent XSS attacks
Prepackaged policies
Custom policy configuration
Attribute policies
HTML preprocessors
Telemetry for discarded elements

Target Audience

developer

Integrations

Not yet documented

Pricing & Plans

Open Source

Free

FAQs

What is the primary purpose of OWASP Java HTML Sanitizer?

The primary purpose is to take HTML content from third parties and process it to ensure it is safe to embed within your web application. This helps protect against Cross-Site Scripting (XSS) attacks by removing or modifying potentially malicious code.

Can I customize the sanitization rules?

Yes, the tool is highly configurable. You can use prepackaged policies for common scenarios or craft custom policies using the HtmlPolicyBuilder to define allowed elements, attributes, URL protocols, and even implement custom logic for transformations or attribute handling.

How does the tool help monitor security policy violations?

The tool includes a telemetry feature through HtmlChangeListener. This allows you to track when elements or attributes are discarded by a policy, providing insights into potential attempts to breach your security and helping you monitor policy violation trends.

Trending

Subcategories trending in Coding & Development

Open Source & Models DevOps & Infrastructure No-Code / Low-Code Testing & QA Backend & APIs Prompt Engineering

Trending

Explore

Browse AI tools by category

Content & Design Productivity & Business Coding & Development AI Agents & Automation Research & Education Wellness & Lifestyle Career Development Marketing & Growth Data & Analytics Customer Support & CX Finance E-commerce