Decontaminator
Ruby HTML sanitizer based on a lightweight Oga parser.
Current version: 1.0.2
Supported Ruby versions: 1.9.3, 2.0, 2.1, 2.2, JRuby 1.7, and Rubinius 2.5
Installation
Add this line to your application's Gemfile:
gem 'decontaminator'
And then execute:
$ bundle
Or install it yourself as:
$ gem install decontaminator
Usage
require 'decontaminator'
input = '<h1>Heading</h1><p>Lorem ipsum...</p><script>alert(1)</script>'
fragment = Decontaminator::Fragment.new(input)
puts fragment.decontaminate.inspect
" Heading Lorem ipsum... "
Contributing
- Fork it ( https://github.com/altmetric/decontaminator/fork )
- Create your feature branch (
git checkout -b my-new-feature
) - Commit your changes (
git commit -am 'Add some feature'
) - Push to the branch (
git push origin my-new-feature
) - Create a new Pull Request
License
Copyright © 2015-2018 Altmetric LLP
Distributed under the MIT license.