Check whether a string contains potentially dangerous HTML patterns (XSS vectors).
The value to test. Non-string values return false.
true if dangerous patterns are detected, false otherwise.
true
false
Detects script, iframe, object, embed, base, form, meta, link, event handlers, and dangerous protocols.
Check whether a string contains potentially dangerous HTML patterns (XSS vectors).