Hello
World
'; $sanitized = StringHelper::sanitizeHtml($maliciousContent); // Script tags should be completely removed $this->assertStringNotContainsString('">Click'; $sanitized = StringHelper::sanitizeHtml($maliciousContent); // JavaScript data URIs should be removed $this->assertStringNotContainsString('data:text/html', $sanitized); $this->assertStringNotContainsString('More safe content with a link.
'; $sanitized = StringHelper::sanitizeHtml($mixedContent); // Safe content preserved $this->assertStringContainsString('