bs-safe-text

Secure, automatic input sanitization for Angular (v18+)

bs-safe-text provides a lightweight and powerful way to sanitize user input across your entire Angular application automatically — helping prevent XSS, invalid characters, and unsafe data entry.

Features

• Automatic sanitization on all <input> and <textarea>
• Multiple built-in policies (name, email, phone, etc.)
• Angular Reactive Forms validator support
• Safe URL sanitization
• Pipe support for display sanitization
• Zero runtime dependencies
• Works with standalone and NgModule Angular apps
• Opt-out support using skipSafeText

Installation

npm install bs-safe-text

Setup

Standalone Angular (Recommended)

import { provideSafeText } from 'bs-safe-text';

bootstrapApplication(AppComponent, {
  providers: [
    provideSafeText({
      maxLength: 500,
      defaultPolicy: 'locked',
      trim: true,
      normalizeUnicode: true,
      logWarnings: false
    })
  ]
});

NgModule-based Apps

import { SafeTextModule } from 'bs-safe-text';

@NgModule({
  imports: [
    SafeTextModule.forRoot({
      maxLength: 500,
      defaultPolicy: 'locked'
    })
  ]
})
export class AppModule {}

Usage

<input type="text" />
<input type="email" />
<textarea></textarea>

Override Policy

<input safeTextPolicy="name" />
<input safeTextPolicy="email" />
<input safeTextPolicy="phone" />

Disable Sanitization

<input skipSafeText />

Pipe Usage

{{ value | safeText }}
{{ value | safeText:'text' }}

Policies

• locked
• name
• email
• phone
• number
• address
• text
• alphanumeric
• none

Requirements

• Angular v18+
• @angular/forms