htmlsanitizer 0.2.0

A fast, allowlist-based HTML sanitizer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

//! Streaming sanitization using the io::Write interface.

use std::io::Write;

use htmlsanitizer::HtmlSanitizer;

fn main() {
    let sanitizer = HtmlSanitizer::new();
    let mut output = Vec::new();

    {
        let mut writer = sanitizer.new_writer(&mut output);

        // Write HTML in chunks — state is preserved between writes
        writer
            .write_all(b"<p>Hello </p><scr")
            .expect("write failed");
        writer
            .write_all(b"ipt>alert('xss')</script>")
            .expect("write failed");
        writer.write_all(b"<b>world</b>").expect("write failed");
    }

    let result = String::from_utf8(output).unwrap();
    println!("Streamed output: {result}");
    // Output: <p>Hello </p><b>world</b>
}