HTML Minifier
Minify HTML fragments or documents locally while preserving script, style, pre, and textarea content.
Open toolHTML Sanitizer
Remove scripts and event handlers from HTML while keeping basic text, lists, tables and links. Review the cleaned source and contained preview, then copy or download the fragment.
Free to useNo sign-upRuns in your browser
Enter your details
Enter the inputs, then select Sanitize HTML.
Your result
Enter your details
Result will appear here
How HTML Sanitizer works
DOMPurify keeps an allowlist of basic HTML tags and link attributes and removes active or unsupported content.
This page keeps text formatting, lists, tables and links. Images, CSS, forms, embedded content and event attributes are removed. The preview cannot execute scripts or load external resources. Sanitizing a fragment does not replace context-specific security checks in your own application.
How to use HTML Sanitizer
Paste an HTML fragment, apply the basic allowlist, and compare retained markup before taking it to another application.
Paste the HTML fragment
Include the text, list or table markup you want to keep. This basic policy removes images, CSS, forms and active content.
Input and settings
Sanitize HTML
Select Sanitize HTML to remove scripts, event handlers, images, CSS and other unsupported markup. The result keeps the basic tags and link attributes allowed by this page.
Tool result
Review and copy the cleaned HTML fragment
Compare the cleaned source and contained preview. Copy the fragment or download the HTML for a separate application review.
Review the details
Clean pasted HTML for basic text and table markup
Prepare basic markup for a destination with its own HTML policy.
Review pasted article markup
Keep paragraphs, headings and links from a pasted fragment while removing its unsupported attributes and active elements.
Reduce a fragment to basic formatting
Prepare simple text, lists or tables for a destination that accepts basic HTML. Check that the destination permits the same tags.
Inspect removed attributes
Try a small fragment with a style or event attribute and compare the returned source. This is a policy demonstration, not a security certification.
Allowed HTML tags and removed attributes
Compare the cleaned source with the preview to see what the basic HTML policy retained.
Read the returned HTML as the result of this page's allowlist. Removed images, CSS and attributes will not appear in the output.
HTML sanitizing limits and application context
A fragment accepted by this allowlist still needs checks for its destination and insertion context.
The text input is limited to 100,000 characters. A fragment that needs images, styles, forms or embedded content cannot retain them under this basic policy; review the permitted markup before replacing the source.
The preview blocks scripts and external resource loading. It illustrates retained formatting, while application-level sanitization, URL policies and the eventual insertion context still need separate review.
More free tools to try
Choose another tool for your next calculation, conversion, or text task.
JSON Diff Checker
Compare two JSON values by structure. See changed paths without treating object key order as a difference.
Open tool
CSV Validator
Check CSV quoting and consistent column counts, then review the record count and selected delimiter.
Open tool
Image Metadata Remover
Create a newly encoded PNG, JPEG or WebP from a local image and remove its original embedded metadata.
Open tool
SRT to VTT Converter
Convert numbered SRT cues into a WebVTT file with dot-separated milliseconds and plain subtitle text.
Open toolSanitize HTML with your own input
Remove scripts, event handlers and unsupported markup from basic HTML. Review the cleaned fragment and a contained preview.
HTML Sanitizer: common questions
Answers about using HTML Sanitizer and understanding its results.
Will my stylesheet remain?
No. Style elements and style attributes are removed by this basic HTML policy.
Does the preview execute my HTML?
The preview renders allowed markup in a sandbox with scripts and resource loading disabled.