> ## Documentation Index
> Fetch the complete documentation index at: https://resq-dependabot-github-actions-github-actions-478e18be3d.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# ValidateUserInput

# Function: validateUserInput()

> **validateUserInput**(`input`, `maxLength?`, `allowHtml?`): `string`

Defined in: [sanitize.ts:315](https://github.com/resq-software/npm/blob/fe2e20ae9db8398a0db1e3218edaabb3cf7004d6/packages/security/src/sanitize.ts#L315)

Validates and sanitizes generic user input by trimming, removing HTML tags (unless allowed),
normalizing whitespace, and removing dangerous patterns to prevent XSS and basic injection flaws.

## Parameters

### input

`string`

User input to validate and sanitize.

### maxLength?

`number` = `500`

Maximum allowed input length. Excess will be truncated.

### allowHtml?

`boolean` = `false`

If true, HTML tags are preserved; otherwise, all tags are stripped.

## Returns

`string`

Sanitized input string with length at most `maxLength`.

## Compliance

NIST 800-53 SI-10 (Information Input Validation)

## Example

```typescript theme={null}
validateUserInput('<p>Hello!</p>', 50); // "Hello!"
validateUserInput('<script>alert(1)</script>test', 100); // "test"
```