How can I allow WYSIWYG editors and disable XSS attacks using Laravel?
I have a enterprise level application where logged in users are authorized to post articles to page using a WYSIWYG editor. (You can consider this application as a website builder.) Everything works fine, but the problems are; WYSIWYG editor posts a HTML containing article, also some localised string characters which Laravel doesn't like, so Laravel's alpha_num check can't pass. (Therefore we don't use it on validation checks.) We need to allow characters like < , " , > because they may want to do some basic styling using WYSIWYG editor, so htmlspecialchars() is not an option while echoing