[RESOLVED] Scrubbing data for XSS

[TenaciousC]

I have been using PDO for my database stuff recently, and know that it does help in preventing SQL injections. However, I also want to prevent the possibility of data containing XSS code.

Using strip_tags() or htmlentities() (or any other function like those) is not a possibility. The content is coming from TinyMCE, and thusly needs to have HTML in place.

Is there anything anyone can recommend? This should be able to stand alone (i.e. not part of some framework). Just a simple class that I can drop into my project would be nice.

[Weedpacket]

Doesn't TinyMCE itself provide support for filtering input? As well as offering information about what to do if JavaScript (and therefore TinyMCE) is disabled?

http://wiki.moxiecode.com/index.php/TinyMCE:Security

[TenaciousC]

I was not aware that it did, but thanks for posting that. Problem solved!