Loofah

Health v2 · maintenance only

Adoption not part of the score

1000 stars · 146 forks observed · 2026-10-22

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.95

Loofah is a Ruby library built on Nokogiri for manipulating and transforming HTML/XML documents and fragments, including a framework for writing custom scrubbers. It ships built-in HTML sanitizers based on html5lib's safelist, with optional Active Record extensions via the loofah-activerecord gem.

Use cases

• sanitize user-submitted HTML to prevent XSS
• strip or escape unsafe HTML tags in Ruby apps
• transform HTML documents with custom scrubbers
• convert HTML markup to plain text
• add nofollow or target=_blank attributes to links
• replace Rails strip_tags and sanitize helpers
• sanitizing ActiveRecord model attributes

When to choose

• you need HTML/XML sanitization in a Ruby application
• you want a general framework for writing custom document transformations
• you use Rails and want stronger sanitization than the defaults
• you need plain-text formatting from HTML with sensible whitespace handling

When to avoid

• you need highly flexible tag/attribute allowlist configuration (consider rgrove/sanitize)
• you are not working in Ruby
• you only need to parse documents without transformation (plain Nokogiri may suffice)

Facets

library · maturity stable

serialization security parser nlp web-development security developer-tools parsers ruby html-sanitization html-parsing xml nokogiri scrubbers xss-protection activerecord

Member repositories

For agents

markdown · JSON · MCP: product_card(name="flavorjones/loofah")