Skip to main content
Jahia Store
EN

Jahia HTML Filtering

supported
Download 3.0.0

Information

Module ID
html-filtering
Group ID
org.jahia.modules
Status
supported
Category
Security
Author
JSG
Developer website
http://www.jahia.com
Requires Jahia
8.1.9.0
Updated
2026-07-09
Source
scm:git:git@github.com:Jahia/html-filtering.git
Tags
  • security
  • xss
  • rich-text

When editing a site, contributors often use a HTML-based rich text editor. Since contributors are allowed to use HTML tags and to copy and paste HTML content, this module can be used to prevent the use of specific HTML tags in rich text fields.

Documentation about the module can be found on this Jahia Academy page.

Versions

Breaking Changes

  • Changed the default HTML filtering strategy for the edit workspace from SANITIZE to REJECT

Bug Fixes

  • Added missing ARIA attributes, HTML microdata, and additional semantic HTML elements to the allowlist of the global default configuration. 

Other updates

  • Bumped the OWASP Java HTML Sanitizer library from 20260102.1 to 20260313.1
  • Updated jahia parent to latest supported version 8.1.9.0
Requires Jahia 8.1.9.0Updated 2026-05-04
2.0.0draftDownload

Breaking Changes

This new version of HTML filtering is a major refactoring of the module with new features and a new format for its configuration file.

dedicated page on Jahia Academy details the configuration of the module as well as instructions to migrate from v1 to v2.

Improvements

  • Support for two different filtering strategies: SANITIZE or REJECT (v1 only supported SANITIZE by default with no option to change)
  • Separate configuration sections for different workspaces
  • Improved configuration file organization to avoid conflicts with default settings
  • Enhanced flexibility for content processing based on permissions, node types, and property names
  • Configurable format definitions (patterns were hardcoded in v1)
Requires Jahia 8.1.8.0Updated 2026-05-04

Improvements

  • Added a permission check (now requires siteAdminHtmlSettings)
  • Upgraded owasp-java-html-sanitizer from 20220608.1 to 20240325.1
Requires Jahia 8.1.5.0Updated 2025-02-13

Initial release of the module, please refer to the Academy for the module's documentation.

Requires Jahia 8.1.5.0Updated 2024-03-06