John Godley

HTML Purified replaces the default WordPress comments filters with HTML Purifier, a super HTML filtering 
library.
<blockquote>
HTML Purifier is a standards-compliant HTML filter library written in PHP. HTML Purifier will 
 not only remove all malicious code (better known as XSS) with a thoroughly audited, secure yet 
 permissive whitelist, it will also make sure your documents are standards compliant, something 
 only achievable with a comprehensive knowledge of W3C’s specifications.
</blockquote>
An additional feature of HTML Purifier is that it will produce valid well-formed XHTML code, something 
which KSES does not do.
Features:
<ul>
<li>Configurable KSES or HTML Purifier</li>
<li>Configurable list of HTML elements and attributes for both KSES and HTML purifier</li>
<li>Additionally process comments with HTML Tidy</li>
<li>URL blacklist</li>
<li>Fully localized (and awaiting translations)</li>
<li>Automatically escape PHP or anything inside backticks</li>
</ul>
HTML Purifier is available in:
<ul>
<li>English</li>
<li>Spanish, thanks to José Cuesta</li>
<li>Belorussian, thanks to Marcis Gasuns</li>
<li>Russian, thanks to Ilyuha</li>
<li>Uzbekistan, thanks to Alexandra Bolshova</li>
<li>Dutch, thanks to Pieter</li>
<li>German, thanks to Andreas Beraz</li>
<li>Polish, thanks to Kasia Ciszewski & Dawid Śpiechowicz</li>
<li>Romanian, thanks to Alina @ InboxTranslations.com</li>
<li>Lithuanian, thanks to Nata Strazda</li>
<li>Ukranian, thanks to Iflexion Design</li>
</ul>
<h3>Documentation</h3>
Full documentation can be found on the <a href="http://urbangiraffe.com/plugins/html-purified/" rel="nofollow ugc">HTML Purified</a> page.

HTML Purified

HTML Purified replaces the default comments filters with the more secure HTML Purifier.

Jose Mortellaro

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.
Just activate it, no settings, no bloat.
It will not stop all the Cross Site Scripting injections, but with a very few lines of code you will drastically increase the security of your website without worsening the performance.
You can read more about what it does at <a href="https://josemortellaro.com/how-to-prevent-cross-site-scripting-xss/" rel="noopener nofollow ugc">https://josemortellaro.com/how-to-prevent-cross-site-scripting-xss/.</a>.
<h3>Help</h3>
If you need help open a thread on the support forum of this plugin. 
Please, before posting enable the debugging in wp-config.php. Need a step-by-step guide? Read <a href="https://freesoul-deactivate-plugins.com/how-to-enable-debugging-in-wordpress-a-step-by-step-guide/" rel="nofollow ugc">this detailed tutorial</a> on <a href="https://freesoul-deactivate-plugins.com/how-to-enable-debugging-in-wordpress-a-step-by-step-guide/" rel="nofollow ugc">how to enable debugging in WordPress</a> to learn more.

Basic Security: Prevent Cross Site Scripting

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

HTML Purified vs Basic Security: Prevent Cross Site Scripting