itools's packages

• PHP

  itools/htmlsecuritycheck

  Allowlist check for HTML that has to be printed unencoded, such as rich text from a WYSIWYG editor: rejects content that could run script, send the page's data to another host, or mislead the visitor, and never rewrites what it accepts

  227 0

• PHP

  itools/smartarray

  XSS-safe collections for PHP templates: database rows with fields that HTML-encode themselves, plus chainable filtering, sorting, and grouping

  51 749 1

• PHP

  itools/smartstring

  XSS-safe strings for PHP templates: values HTML-encode themselves on echo, interpolation, and concatenation, at least 3x faster than calling htmlspecialchars() yourself

  51 425 1

• PHP

  itools/svgsecuritycheck

  Allowlist check for uploaded SVG files: rejects any that could run script, load an outside resource, or hang a renderer, even when opened outside an <img> tag, and never rewrites a file it accepts

  228 0

• PHP

  itools/zendb

  Injection-proof PHP/MySQL database layer with automatic XSS-safe output

  41 042 3