getSafeHTML

Sanitizes HTML using antisamy policy rules.

getSafeHTML(inputString [, PolicyFile, throwOnError]) → returns any

This function requires Adobe ColdFusion 11 and up. Not supported on Lucee, etc.

Argument Reference

String to be sanitized

File path for custom antisamy policy file. Can be defined in the application scope or if not defined will use ColdFusion server default

If true will throw error else empty string will be returned

Examples

Sample code invoking the getSafeHTML function

AntiSamy parameter can be set in the application scope


<cfcomponent>
  <cfset this.security.antisamypolicy = "antisamy.xml">
</cfcomponent>

demonstrates usage

<cfset  SafeHTML = getSafeHTML(inputHTML, "", true)>

Signup for cfbreak to stay updated on the latest news from the ColdFusion / CFML community. One email, every friday.

Argument Reference