in reply to Re: Best Module for Cross-Site Scripting ?
in thread Best Module for Cross-Site Scripting ?
I have also had very good experience with HTML::Scrubber. I use it entirely in "whitelist mode", so only the tags I want come through, and for those tags, only the attributes I want on them come through.
One small drawback is that it does not check for the HTML being well-formed, e.g. if you send it HTML snippets with missing closing tags, those will come through as-is.
Larry
|
|---|