Noting this down for future reference:
WasHTML is a PHP script that allow only safe HTML for web-applications that have to display unsafe data. It washes your HTML from dangerous data like javascript, references to unchecked remote files and forms that allow anyone to remotly control web applications in the same domain. The script is short enough to be easily reviewed (around 100 lines).
Via: Roundcube
make clickable test (see Ticket #14993)
http://www.google.com/
http://www.google.com/?
Did it appear on http://www.google.com/?
Yes, it did appear on http://www.google.com/!
I’m suspicious about the UTF8 safeness…
Well does it care about encoding at all? It’s somehow older, I just ran over it and put it on the blog to bookmark it. That’s all.