Can be used to preprocess the given +html+ String before it is scrubbed.

Scrubs a single tag given its attributes and children.

Calls scrub_attribute/2 to scrub individual attributes.

Scrubs a single attribute for a given tag.

You can utilize scrub_attribute to write custom matchers so you can sanitize specific attributes of specific tags:

As an example, if you only want to allow href attribute with the "http" and "https" protocols, you could implement it like this:

def scrub_attribute("a", {"href", "http" <> target}) do
  {"href", "http" <> target}
end

def scrub_attribute("a", {"href", _}) do
  nil
end