Registry / security / rails-html-sanitizer

rails-html-sanitizer

JSON →
library1.7.0rbrubygemsunverified

HTML sanitization for Rails applications, providing methods to strip or escape HTML tags.

securityweb-framework
gem install rails-html-sanitizer
github ↗homepage ↗docs ↗
INSTALL
IMPORT
SIG · RAILS-HTML-SANITIZ
R
rails-html-sanitizer
securityrubyv1.7.0
harness data pending
Install & Compatibility
Where this runs

No compatibility data collected yet for this library.

Code
Verified usage

Verified import paths — ran on the pinned version, not inferred.

Rails::Html::Sanitizer
✓ require 'rails-html-sanitizer'

Sanitize HTML input

require 'rails-html-sanitizer' sanitizer = Rails::Html::FullSanitizer.new puts sanitizer.sanitize('<script>alert(1)</script>Hello')
Debug
Known issues
breakingOlder versions vulnerable to XSS bypass (CVE-2022-32209)
fix
Update to version >= 1.4.4
affects: < 1.4.4
Upgrade
Version history
1.7.0latest on RubyGems
Audit
Dependencies

No dependency data recorded yet.

Agent activity
20 hits · last 30 days
node
18
Resources
githubhttps://github.com/rails/rails-html-sanitizer ↗
homepagehttps://github.com/rails/rails-html-sanitizer ↗
docshttp://www.rubydoc.info/gems/rails-html-sanitizer/ ↗
rails-html-sanitizer — gem install rails-html-sanitizer · libregistry