The Law
·
Sanitize post markup and provide xss protection with htmLawed
HTMLawed is an html sanitizer and validator by PHP Labware, dual licenced with LGPL3 and GPL2+.
This plugin will run HTMLawed (current version 1.1.16) as a filter on post and title content. Using the default settings embed tags, script tags, inline stylesheets and iframes will be removed from the html.
Config
Refer to the htmlawed documentation for config options for htmlawed. The .htmlawedconfig file included with the plugin follows the .ini file syntax and by default strips content for xss-unsafe elements. This file will not show up in the wordpress plugin editor.