Reset priority according to docs

The SAFEHTML filter in JForm uses JFilterInput->clean($value, 'html'), which does exactly the same as JInputFilter->clean($value, 'html'). It removes blacklisted HTML tags from the input.

I'm not sure exactly what you want. If you need the tags, then RAW is the option you need. But then you need to take care of security yourself.

If HTML does the job of SAFEHTML, I wouldn't have escalated this issue. But HTML filter does the same of STRING filter and therefore it strips all the html code from the input.

Test the following code and you will know the result.

$string = "

sample description

If you see the actual filter in /libraries/vendor/joomla/filter/src/InputFilter.php for string and HTML, both are similar.

case 'STRING':
$result = (string) $this->remove($this->decode((string) $source));
break;

case 'HTML':
$result = (string) $this->remove((string) $source);
break;

I would like to confirm that both filter are same and HTML strips the html tags.

@akfaisel check https://github.com/joomla/joomla-cms/blob/staging/libraries/joomla/form/form.php#L1294
there JFilterInput::getInstance(null, null, 1, 1)->clean($value, 'html');`
well, I missed that in your description sorry!

use:

$desc = JComponentHelper::filterText($app->input->get('description', '', 'raw'));

Joomla use JComponentHelper::filterText for the editor input

Yes, that was in my first post. SAFEHTML is available in form.php but missing in InputFilter.php

Joomla is using JForm for rendering its pages but we like custom component developer (from JoomBri) cannot use JForm and we resort to use basic HTML fields and validate/filter the input from our users. Therefore, I cannot use filter method from form.php but use inputfilter.php to sanitise the inputs.

Yes, later I discovered this code to sanitise the html input.

$rawDesc = $app->input->get('description', '', 'RAW');
$description = JFilterInput::getInstance(null, null, 1, 1)->clean($rawDesc, 'html');

I would be glad if SAFEHTML filter can be added to InputFilter.php or at least make change to the existing HTML filter to allow html tags. At the moment, HTML filter is buggy that is copying the job of STRING filter.

Thank you very much for you time.

It will be nice to filter in just one line instead of using 'raw' and again filtering it.

Thanks anyway

closing this because there are enough different ways to achieve the filtering as requested