1.4.0

Included commits: 1.3.0...1.4.0

Fixes

• Fixed HTML sanitization on PHP 8.4 by introducing NativeHtmlParser that passes LIBXML_NOERROR when parsing HTML, preventing malformed entity warnings from propagating as ErrorException through Spryker's error handler and causing back office configuration failures.

1.3.0

Included commits: 1.2.0...1.3.0

Improvements

• Introduced UtilSanitizeXssServiceInterface::sanitize() to sanitize untrusted HTML using the Symfony HtmlSanitizer with full configuration support.
• Introduced HtmlSanitizerConfigTransfer, HtmlSanitizerAllowedElementTransfer, and HtmlSanitizerAllowedAttributeTransfer transfer objects.

Adjustments

• Added Symfony and Transfer to dependencies

1.2.0

Included commits: 1.1.0...1.2.0

Improvements

• Adjusted UtilSanitizeXssService::sanitizeXss() so HTML comments are not removed from the given text.

1.1.0

Included commits: 1.0.0...1.1.0

Improvements

• Adjusted UtilSanitizeXssService::sanitizeXss() so Twig functions are not removed from the given text.

1.0.0

Included commits: https://github.com/spryker/util-sanitize-xss/tree/1.0.0

Initial Release

• Introduced UtilSanitizeXssService::sanitizeXss() Service method to sanitize untrusted HTML to prevent XSS attacks.