我的tinymce编辑器的HTML清理

Question

I already have read a question about this here ... Now I know, that there are many libs, which allow me to sanitize my string...

The Problem

I use the TinyMCE editor for every text input on my website. Users can use HTML tags like <b> , <li> , <ol> , <p> and so on.

I don't want to "allow" cross side scripting on my website, so I need a tool, which can filter the "bad" tags :)

I want to use it like $string = sanitize($string) . It doesn't have to be exactly like this, but it should be easy to use ^^

I already read about such tools, but I'm not sure which one is the best ...

Suggestions would be great :)

Answer 1

You must do this check on the server side. It looks like your's is PHP (or Perl?). See this: Sanitizing HTML input