Takes untrusted third-party HTML and returns HTML that is safe to embed, enforcing a configurable policy of elements, attributes, CSS and URLs. Used server-side across the Java ecosystem to stop cross-site scripting in user-generated content; GitHub lists more than 4,300 dependent repositories. 45 Maven releases since 2011.
Fund this project
Sun, 11 Oct 2026 12:00:05 UTC
There was a problem with this listing's funding.json manifest.
If it is not fixed, the listing will be removed from the portal.
Crawl error
error: https://github.com/OWASP/owasp-java-encoder/blob/main/.well-known/funding-manifest-urls?raw=true returned 429
Jim Manico
github.com/OWASP/java-html-sanitizer
github.com/OWASP/java-html-sanitizer