Declarative input
sanitization for Java.

install

Available on Maven Central. Pull in the integration you need.

// Spring Boot
implementation("io.github.rabinarayanpatra.sanitizer:sanitizer-spring:1.1.0")

// JPA (optional)
implementation("io.github.rabinarayanpatra.sanitizer:sanitizer-jpa:1.1.0")

<dependency>
  <groupId>io.github.rabinarayanpatra.sanitizer</groupId>
  <artifactId>sanitizer-spring</artifactId>
  <version>1.1.0</version>
</dependency>

usage

Annotate any field. Chain multiple sanitizers; they run in order.

// DTO — sanitized on Jackson deserialization
public class UserDto {

  @Sanitize(using = { TrimSanitizer.class, LowerCaseSanitizer.class })
  private String email;

  @Sanitize(using = CreditCardMaskSanitizer.class)
  private String cardNumber;
}

// JPA entity — sanitized on @PrePersist / @PreUpdate
@Entity
@EntityListeners(SanitizationEntityListener.class)
public class Payment {

  @Id @GeneratedValue
  private Long id;

  @Sanitize(using = CreditCardMaskSanitizer.class)
  private String cardNumber;
}

No registry calls. No interceptor wiring. Spring Boot autoconfiguration handles the Jackson module and sanitizer registry on startup.

why

• Declarative. One annotation. Sanitization lives next to the field it protects.
• Composable. Chain sanitizers in any order. Mix built-ins with your own.
• Framework-aware. Hooks into Jackson for DTOs and JPA listeners for entities — no manual calls.
• Configurable. Pass parameters via params="maxLength=100,suffix=...".
• Modular. sanitizer-core stands alone. Add -spring or -jpa only if you need them.

built-in sanitizers

extending

Implement FieldSanitizer<T> for your own logic.

@Component
public class NumericOnlySanitizer implements FieldSanitizer<String> {
  @Override
  public String sanitize(String input) {
    return input == null ? null : input.replaceAll("[^0-9]", "");
  }
}

Or extend ConfigurableFieldSanitizer if you need parameters.

documentation

• API Javadoc — full reference for all three modules
• README — extended guide and examples
• Changelog
• Maven Central