HTML Purifier – Malicious Input Filtering (XSS Protection)

Posted by rajivvishwa On January - 27 - 2010

HTML Purifier is a standards-compliant HTML filter library written in PHP. HTML Purifier will remove all malicious code (efficient filtering of XSS scripts) with a thoroughly audited, secure yet permissive whitelist.

HTML Comparison Chart

HTML Comparison Chart

Quick Install

1
2
3
4
5
6
<?php
    require_once '/path/to/htmlpurifier/library/HTMLPurifier.auto.php';
 
    $purifier = new HTMLPurifier();
    $clean_html = $purifier->purify($dirty_html);
?>

View Before-After XSS Filtering

View Demo: HTML Purifier

Download HTML Purfier : Download (More Info at: http://htmlpurifier.org/)


Share and Collaborate Text or Code With Your Friends

Posted by rajivvishwa On March - 31 - 2009

FriendPaste is a web application that allows you to share, edit and collaborate your code with your peers in an easy and intuitive way. This application accepts the code and displays in friendly, syntax highlighted format to whoever asks for. The display can completely be customized and then it can be shared with anyone by sending the unique url which identifies shared code… It is that simple…

Syntax Highlight
Read the rest of this entry »

AppKeys – Suite of Simple Utilites With AHK

Posted by rajivvishwa On February - 23 - 2009

AppKeys is a suit of applications built based on AHK scripting language which can be invoked by using various keyboard shortcuts. The shortcuts can be modified by editing the ahk scripts. Running this ahk file will consume very less amount of memory and can run each command almost instantaneously. This suite of apps replaces dozens of applications which needs to be installed otherwise to do the same operations.

Read the rest of this entry »

Alert For Missing Subject And Attachment in Outlook

Posted by rajivvishwa On January - 12 - 2009

Subject line in a mail is a key for identifying and digging the required mails from the mail archives. So we have to be careful not to miss it at any chance but unfortunately we do miss by accident. Another possible mistake we do is to miss the attachments mentioned in the mail.

Outlook Subject Alert Screenshot

Read the rest of this entry »

Cross-site request forgery Demo

Posted by rajivvishwa On December - 31 - 2008

XSRF is an exploit where malicious scripts are transmitted from one trusted site to trigger undesirable operations in some other user authenticated trusted site. The user-website trust is broken and this is exploited. Read the rest of this entry »

Subscribe RSS
Follow me on TwitterTechnoratiYoutube VidsLinkedIn ProfileDelicious