html

package

v0.1.0 Latest Latest Go to latest Published: Jan 6, 2026 License: MIT Imports: 3 Imported by: 0

Details

Package html provides XSS prevention (CWE-79) using pure Go.

This section is empty.

This section is empty.

func EscapeString(s string) string

EscapeString escapes HTML special characters.

func UnescapeString(s string) string

UnescapeString unescapes HTML entities.

type Sanitizer struct {
	// contains filtered or unexported fields
}

Sanitizer provides HTML sanitization.

func New(allowedTags []string) *Sanitizer

New creates an HTML Sanitizer.

func UGC() *Sanitizer

UGC returns a sanitizer for User Generated Content.

func (s *Sanitizer) AllowedTags() []string

AllowedTags returns the list of allowed tags.

func (s *Sanitizer) IsStripAll() bool

IsStripAll returns whether all tags are stripped.

func (s *Sanitizer) SanitizeAttribute(input string) string

SanitizeAttribute escapes HTML attribute values.

func (s *Sanitizer) SanitizeBody(input string) string

SanitizeBody removes dangerous HTML elements.

func (s *Sanitizer) StripTags(input string) string

StripTags removes all HTML tags.