Skip to main content
Jahia Store
EN

Jahia HTML Filtering

supported
Download 3.0.0

Information

Module ID
html-filtering
Group ID
org.jahia.modules
Status
supported
Category
Security
Author
JSG
Developer website
http://www.jahia.com
Requires Jahia
8.1.9.0
Updated
2026-07-09
Source
scm:git:git@github.com:Jahia/html-filtering.git
Tags
  • security
  • xss
  • rich-text

When editing a site, contributors often use a HTML-based rich text editor. Since contributors are allowed to use HTML tags and to copy and paste HTML content, this module can be used to prevent the use of specific HTML tags in rich text fields.

Documentation about the module can be found on this Jahia Academy page.

Dependencies

Depended on by

Nothing depends on this module.

Versions

Breaking Changes

  • Changed the default HTML filtering strategy for the edit workspace from SANITIZE to REJECT

Bug Fixes

  • Added missing ARIA attributes, HTML microdata, and additional semantic HTML elements to the allowlist of the global default configuration. 

Other updates

  • Bumped the OWASP Java HTML Sanitizer library from 20260102.1 to 20260313.1
  • Updated jahia parent to latest supported version 8.1.9.0
Requires Jahia 8.1.9.0Updated 2026-05-04

Improvements

  • Added a permission check (now requires siteAdminHtmlSettings)
  • Upgraded owasp-java-html-sanitizer from 20220608.1 to 20240325.1
Requires Jahia 8.1.5.0Updated 2025-02-13

Initial release of the module, please refer to the Academy for the module's documentation.

Requires Jahia 8.1.5.0Updated 2024-03-06