HTML Sanitizer API

This version:: https://wicg.github.io/sanitizer-api/
Issue Tracking:: GitHub
Editors:: Frederik Braun (Mozilla) fbraun@mozilla.com; Mario Heiderich (Cure53) mario@cure53.de; Daniel Vogelheim (Google LLC) vogelheim@google.com; Tom Schuster (Mozilla) tschuster@mozilla.com

Not Ready For Implementation

This spec is not yet ready for implementation. It exists in this repository to record the ideas and promote discussion.

Before attempting to implement this spec, please contact the editors.

Copyright © 2026 the Contributors to the HTML Sanitizer API Specification, published by the Web Platform Incubator Community Group under the W3C Community Contributor License Agreement (CLA). A human-readable summary is available.

Abstract

The draft should be no longer consulted for implementations. All content has been merged into the HTML WHATWG repository.

This specification was published by the Web Platform Incubator Community Group. It is not a W3C Standard nor is it on the W3C Standards Track. Please note that under the W3C Community Contributor License Agreement (CLA) there is a limited opt-out and other conditions apply. Learn more about W3C Community and Business Groups.

The Sanitizer API has been moved to WHATWG HTML.

File specification issues in the WHATWG HTML issue tracker.
Please report bugs in implementations to the corresponding browser vendor. We encourage you to look into their security reporting policies.