Crate ammonia

Ammonia is a whitelist-based HTML sanitization library. It is designed to prevent cross-site scripting, layout breaking, and clickjacking caused by untrusted user-provided HTML being mixed into a larger web page.

Ammonia uses html5ever to parse and serialize document fragments the same way browsers do, so it is extremely resilient to syntactic obfuscation.

Ammonia parses its input exactly according to the HTML5 specification; it will not linkify bare URLs, insert line or paragraph breaks, or convert (C) into ©. If you want that, use a markup processor before running the sanitizer, like pulldown-cmark.

Examples

let result = ammonia::clean(
    "<b><img src='' onerror='alert(\\'hax\\')'>I'm not trying to XSS you</b>"
);
assert_eq!(result, "<b><img src=\"\">I'm not trying to XSS you</b>");

Re-exports

pub use url;

Structs

Builder	An HTML sanitizer.
Document	A sanitized HTML document.
Url	A parsed URL record.

Enums

UrlRelative

Policy for relative URLs, that is, URLs that do not specify the scheme in full.

Traits

AttributeFilter	Types that implement this trait can be used to remove or rewrite arbitrary attributes.
UrlRelativeEvaluate	Types that implement this trait can be used to convert a relative URL into an absolute URL.

Functions

clean	Clean HTML with a conservative set of defaults.
clean_text	Turn an arbitrary string into unformatted HTML.