HK2 Search Sanitizer

Sanitize Search is a lightweight security utility for Magento 2 that sanitizes storefront search queries before they are processed by Magento. By intercepting search input at the application boundary, the extension filters common SQL keywords, control characters, and potentially malicious input patterns, providing an additional defense-in-depth layer that helps reduce the risk of search-based injection attempts.

The extension is designed for merchants, developers, and agencies who want to strengthen storefront security without modifying Magento core functionality or affecting the customer search experience. It integrates seamlessly with Magento's search workflow, sanitizing user input before it enters the database execution pipeline while maintaining compatibility with Magento's native search features.

Unlike complex Web Application Firewalls (WAFs) or infrastructure-level security solutions, HK2 Sanitize Search focuses specifically on storefront search input. It offers a lightweight, Magento-native implementation that requires minimal configuration and follows Magento development best practices, making it easy to deploy across new and existing stores.

Features

• Sanitizes storefront search queries before processing
• Filters common SQL keywords from search input
• Removes control characters and potentially unsafe input
• Provides defense-in-depth protection for storefront searches
• Lightweight implementation with minimal performance overhead
• Integrates seamlessly with Magento's native search functionality
• No core Magento modifications required
• Clean Magento module architecture following Magento standards
• Compatible with Magento Open Source and Adobe Commerce
• Easy installation and maintenance

Benefits

• Adds an extra security layer for storefront search functionality
• Helps reduce the risk of malicious search input reaching the database layer
• Improves overall storefront security with minimal configuration
• Works transparently without changing the customer experience
• Simple, lightweight, and easy to maintain
• Follows Magento best practices for extensibility and compatibility

Use Cases

• Securing Magento storefront search forms
• Adding defense-in-depth protection against malicious search requests
• Improving the security posture of Magento stores
• Deploying lightweight application-level input sanitization
• Protecting public-facing search functionality with minimal effort
• Meeting internal security and code quality requirements

Account and Pricing

This extension does not require any third-party account, external service, API, or subscription.

The module operates entirely within Magento and performs search query sanitization locally. No customer search data is transmitted to external services.

The extension is provided free of charge with no recurring fees.

Links

GitHub Repository: https://github.com/basantmandal/magento2-search-sanitizer-module/issues
Packagist Package: https://packagist.org/packages/hk2/search-sanitizer

Compatibility

• Magento Open Source 2.4.x
• Adobe Commerce 2.4.x
• PHP 8.x compatible

Documentation

Complete installation, configuration, and usage instructions are available in the GitHub repository.

Support

For bug reports, feature requests, or contributions, please use the GitHub Issues section in the repository.