🛁 go-sanitize

Lightweight Go library providing robust string sanitization and normalization utilities

CI / CD	Quality & Security	Docs & Meta	Community

🗂️ Table of Contents

• Installation
• Usage
• Documentation
• Examples & Tests
• Benchmarks
• Code Standards
• AI Compliance
• Maintainers
• Contributing
• License

📦 Installation

go-sanitize requires a supported release of Go.

go get -u github.com/mrz1836/go-sanitize

💡 Usage

Here is a basic example of how to use go-sanitize in your Go project:

package main

import (
    "fmt"
    "github.com/mrz1836/go-sanitize"
)

func main() {
	// Sanitize a string to remove unwanted characters
	input := "Hello, World! @2025"
	sanitized := sanitize.AlphaNumeric(input, false) // true to keep spaces

	// Output: "Sanitized String: HelloWorld2025"
	fmt.Println("Sanitized String:", sanitized)
}

• Explore additional usage examples for practical integration patterns
• Review benchmark results to assess performance characteristics
• Examine the comprehensive test suite for validation and coverage
• Fuzz tests are available to ensure robustness against unexpected inputs

📚 Documentation

View the generated documentation

Heads up! go-sanitize is intentionally light on dependencies. The only external package it uses is the excellent testify suite—and that's just for our tests. You can drop this library into your projects without dragging along extra baggage.

Features

• Alpha and alphanumeric sanitization with optional spaces
• Bitcoin and Bitcoin Cash address sanitizers
• Custom regular expression helper for arbitrary patterns
• Precompiled regex sanitizer for repeated patterns
• Decimal, domain, email and IP address normalization
• HTML and XML stripping with script removal
• URI, URL and XSS sanitization

Functions

• Alpha: Remove non-alphabetic characters, optionally keep spaces
• AlphaNumeric: Remove non-alphanumeric characters, optionally keep spaces
• BitcoinAddress: Filter input to valid Bitcoin address characters
• BitcoinCashAddress: Filter input to valid Bitcoin Cash address characters
• Custom: Use a custom regex to filter input (legacy)
• CustomCompiled: Use a precompiled custom regex to filter input (suggested)
• Decimal: Keep only decimal or float characters
• Domain: Sanitize domain, optionally preserving case and removing www
• Email: Normalize an email address
• FirstToUpper: Capitalize the first letter of a string
• FormalName: Keep only formal name characters
• HTML: Strip HTML tags
• IPAddress: Return sanitized and valid IPv4 or IPv6 address
• Numeric: Remove all but numeric digits
• PhoneNumber: Keep digits and plus signs for phone numbers
• PathName: Sanitize to a path-friendly name
• Punctuation: Allow letters, numbers and basic punctuation
• ScientificNotation: Keep characters valid in scientific notation
• Scripts: Remove scripts, iframe and object tags
• SingleLine: Replace line breaks and tabs with spaces
• Time: Keep only valid time characters
• URI: Keep characters allowed in a URI
• URL: Keep characters allowed in a URL
• XML: Strip XML tags
• XSS: Remove common XSS attack strings

Additional Documentation & Repository Management

# Install MAGE-X for development and building
go install github.com/mrz1836/mage-x/cmd/magex@latest
magex update:install

brew install goreleaser

magex version:bump bump=patch push

magex help

magex deps:update

🧪 Examples & Tests

All unit tests and fuzz tests run via GitHub Actions and use Go version 1.18.x. View the configuration file.

Run all tests (fast):

magex test

Run all tests with race detector (slower):

magex test:race

⚡ Benchmarks

Run the Go benchmarks:

magex bench

Benchmark Results

These benchmarks reflect fast, allocation-free lookups for most retrieval functions, ensuring optimal performance in production environments. Performance benchmarks for the core functions in this library, executed on an Apple M1 Max (ARM64).

🛠️ Code Standards

Read more about this Go project's code standards.

🤖 AI Compliance

This project documents expectations for AI assistants using a few dedicated files:

• AGENTS.md — canonical rules for coding style, workflows, and pull requests used by Codex.
• CLAUDE.md — quick checklist for the Claude agent.
• .cursorrules — machine-readable subset of the policies for Cursor and similar tools.
• sweep.yaml — rules for Sweep, a tool for code review and pull request management.

Edit AGENTS.md first when adjusting these policies, and keep the other files in sync within the same pull request.

👥 Maintainers

MrZ

🤝 Contributing

View the contributing guidelines and please follow the code of conduct.

How can I help?

All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon:. You can also support this project by becoming a sponsor on GitHub :clap: or by making a bitcoin donation to ensure this journey continues indefinitely! :rocket:

📝 License