Is there an API / LIB to remove JavaScript in the JavaBackend?

Question

We integrated a wysiwyg editor in our website. Now we got the problem that some stuff gets saved in the Database what we might don't want, like JavaScript and so on.

Is there and API / LIB who could filter this stuff out for us? We prefer it to do in our Java Backend. Maybe something that's bases on black and white lists?

possible duplicate of [How to "Purify" HTML code to prevent XSS attacks in Java or JSP?](http://stackoverflow.com/questions/3587199/how-to-purify-html-code-to-prevent-xss-attacks-in-java-or-jsp) — Quentin, Mar 21 '12 at 13:50
or http://stackoverflow.com/questions/2658922/xss-prevention-in-java — VirtualTroll, Mar 21 '12 at 13:51

score 2 · Answer 1 · answered Mar 21 '12 at 13:53

2

Try jsoup :

http://jsoup.org/cookbook/cleaning-html/whitelist-sanitizer

answered Mar 21 '12 at 13:53

Alexis Dufrenoy

11,784
12
82
124

score 2 · Accepted Answer · answered Mar 21 '12 at 13:57

2

Another option could be: OWASP Java HTML Sanitizer

answered Mar 21 '12 at 13:57

antonjs

14,060
14
65
91

Is there an API / LIB to remove JavaScript in the JavaBackend?

2 Answers2