sanitize-caja

sanitize html using caja and reasonable assumptions

npm install sanitize-caja
49 downloads in the last day
294 downloads in the last week
1 307 downloads in the last month

Build Status

sanitize-caja

Sanitize HTML content using the Google Caja JsHtmlSanitizer and a set of basic assumptions, and a wrapper to make it all work in nodejs without global variable leaks and so on.

This is a slightly 'loosened' version of Caja's restrictions, to allow for things like images, links, and a few HTML5 elements.

api

sanitize(html: string) -> sanitized string

Sanitize a string of HTML content, returning a sanitized string.

install

npm install sanitize-caja

example

var sanitize = require('sanitize-caja');

document.write(sanitize(evilUserInput));

see also

npm loves you