PHPackages                             frozennode/xssinput - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. frozennode/xssinput

ActiveLibrary[Security](/categories/security)

frozennode/xssinput
===================

A simple extension of the Laravel Input facade that mimics CodeIgniter's xss filtering

v1.0.0(12y ago)3965.6k↓23.7%21[8 issues](https://github.com/FrozenNode/XssInput/issues)MITPHPPHP >=5.3.0

Since Feb 11Pushed 11y ago4 watchersCompare

[ Source](https://github.com/FrozenNode/XssInput)[ Packagist](https://packagist.org/packages/frozennode/xssinput)[ RSS](/packages/frozennode-xssinput/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (1)Dependencies (1)Versions (2)Used By (0)

XssInput for Laravel
====================

[](#xssinput-for-laravel)

XssInput is a screamingly simple extension of Laravel's Input facade that somewhat mimics the XSS filtering of CodeIgniter's input library. In fact, underneath the hood, this package uses an altered form of CodeIgniter's Security library to filter inputs for XSS.

XSS filtering happens in one of two ways: by setting the `xss_filter_all_inputs` option in this package's config to `true`, or by passing true as the third option to `Input::get()` or as the only option for `Input::all()`.

- **Author:** Jan Hartigan
- **Website:**
- **Version:** 1.0.0

Composer
--------

[](#composer)

To install XssInput as a Composer package to be used with Laravel 4, simply add this to your composer.json:

```
"frozennode/xssinput": "dev-master"
```

..and run `composer update`. Once it's installed, you can register the service provider in `app/config/app.php` in the `providers` array:

```
'providers' => array(
    'Frozennode\XssInput\XssInputServiceProvider',
)
```

..and change the `Input` alias to point to the facade for XssInput:

```
'aliases' => array(
	'Input' => 'Frozennode\XssInput\XssInput'
)
```

You could also, instead of doing this, give the XssInput facade a separate alias.

Then publish the config file with `php artisan config:publish frozennode/xssinput`. This will add the file `app/config/packages/frozennode/xssinput/xssinput.php`, which you should look at and understand because it's one option long.

Usage
-----

[](#usage)

It really is screamingly simple. If you've set the global xss filtering to `true`, then you can continue using the Input facade as you normally would:

```
Input::get('some_var');
```

The same goes for getting all inputs:

```
Input::all();
```

However, if you don't have global xss filtering on, you can pass in a third parameter to the `get()` method:

```
Input::get('some_var', null, true);
```

Or pass in `true` to the `all()` method:

```
Input::all(true);
```

If you have global filtering on, you can pass `false` in as these parameters to turn off filtering for that particular call to either method.

###  Health Score

36

—

LowBetter than 82% of packages

Maintenance16

Infrequent updates — may be unmaintained

Popularity43

Moderate usage in the ecosystem

Community14

Small or concentrated contributor base

Maturity58

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

4479d ago

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/580052?v=4)[Jan Hartigan](/maintainers/janhartigan)[@janhartigan](https://github.com/janhartigan)

---

Top Contributors

[![janhartigan](https://avatars.githubusercontent.com/u/580052?v=4)](https://github.com/janhartigan "janhartigan (7 commits)")

---

Tags

laravelxss

### Embed Badge

![Health badge](/badges/frozennode-xssinput/health.svg)

```
[![Health](https://phpackages.com/badges/frozennode-xssinput/health.svg)](https://phpackages.com/packages/frozennode-xssinput)
```

###  Alternatives

[akaunting/laravel-firewall

Web Application Firewall (WAF) package for Laravel

999465.8k2](/packages/akaunting-laravel-firewall)[tzsk/otp

A secure, database-free One-Time Password (OTP) generator and verifier for PHP and Laravel.

241641.4k1](/packages/tzsk-otp)[masterro/laravel-xss-filter

Filter user input for XSS but don't touch other html

41254.5k](/packages/masterro-laravel-xss-filter)[dgtlss/warden

A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email

8745.6k](/packages/dgtlss-warden)[mitnick/laravel-security

laravel-mitnick helps you secure your Laravel apps by setting various HTTP headers. it can help!

8111.7k1](/packages/mitnick-laravel-security)[laragear/poke

Keep your forms alive, avoid TokenMismatchException by gently poking your Laravel app

2211.5k](/packages/laragear-poke)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)