--- id: bleach version: "6.4.0" license: Apache Software License license_treatment: permissive maintenance: abandoned --- # bleach — An easy safelist-based HTML-sanitizing tool. License: permissive · Maintenance: abandoned · Popularity: top 1,000 on PyPI ## Install pip install bleach uv add bleach poetry add bleach ## Description ====== Bleach ====== **NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues.** See issue: ``__ Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes. Bleach can also linkify text safely, applying filters that Django's ``urlize`` filter cannot, and optionally setting ``rel`` attributes, even on links already in the text. Bleach is intended for sanitizing text from *untrusted* sources. If you find yourself jumping through hoops to allow your site administrators to do lots of things, you're probably outside the use cases. Either trust those users, or don't. Because it relies on html5lib_, Bleach is as good as modern browsers at dealing with weird, quirky HTML fragments. And *any* of Bleach's methods will fix unbalanced or mis-nested tags. The version on GitHub_ is the most up-to-date and contains the latest bug fixes. You can find full documentation on `ReadTheDocs`_. :Code: https://github.com/mozilla/bleach :Documentation: https://bleach.readthedocs.io/ :Issue tracker:... ## AI interpretation — verify before relying Bleach is an allowed-list-based HTML sanitizer that escapes or strips markup and attributes from untrusted text, and can safely linkify URLs with configurable filters. Verdict: Bleach remains a capable HTML sanitizer with low install friction, but its abandonment as of June 2026 with no future security releases makes it unsuitable for new projects handling untrusted input. Existing users should plan migration to an actively maintained alternative. [View on SkillFed](https://skillfed.io/packages/bleach) · [View on PyPI](https://pypi.org/project/bleach/)