---
title: "Sanitize.html ViewHelper <f:sanitize.html>"
manual: "Fluid ViewHelper Reference"
version: "13.4"
permalink: "https://docs.typo3.org/permalink/t3viewhelper:typo3-fluid-sanitize-html@13.4"
source: "Global/Sanitize/Html.rst"
modified: "2026-09-17T09:07:45+00:00"
---

# Sanitize.html ViewHelper `<f:sanitize.html>`

ViewHelper to pass a given content through `typo3/html-sanitizer` to mitigate potential cross-site scripting occurrences. The `build` option by default uses the class `TYPO3\CMS\Core\Html\DefaultSanitizerBuilder`, which declares allowed HTML tags, attributes and their values.

Go to the source code of this ViewHelper: [Sanitize\\HtmlViewHelper.php (GitHub)](https://github.com/TYPO3/typo3/blob/main/typo3/sysext/fluid/Classes/ViewHelpers/Sanitize/HtmlViewHelper.php).

**Table of contents**

-   [Examples](https://docs.typo3.org/permalink/t3viewhelper:examples@13.4)
-   [Arguments of the <f:sanitize.html> ViewHelper](https://docs.typo3.org/permalink/t3viewhelper:arguments-of-the-f-sanitize-html-viewhelper@13.4)

## Examples

### Default parameters

**packages/my_extension/Resources/Private/Templates/Content/Text.fluid.html**

```html
<f:sanitize.html>
  <img src="/img.png" class="image" onmouseover="alert(document.location)">
</f:sanitize.html>
```

**Output**

```html
<img src="/img.png" class="image">
```

### Inline notation

**packages/my_extension/Resources/Private/Templates/Content/Text.fluid.html**

```html
{richTextFieldContent -> f:sanitize.html(build: 'default')}
```

## Arguments of the `<f:sanitize.html>` ViewHelper

-   **build**

    -   *Type:* string
    -   *Default:* 'default'

    preset name or class-like name of sanitization builder