Bug #87747 for HTML-StripScripts-Parser: The parser just ignore your rules relating to a tags

Fri Aug 09 14:38:12 2013 delvarworld [...] yahoo.com - Ticket created

Subject:	The parser just ignore your rules relating to a tags
MIME-Version:	1.0
X-Mailer:	MIME-tools 5.504 (Entity 5.504)
Content-Disposition:	inline
X-RT-Interface:	Web
Message-ID:	<rt-4.0.16-29715-1376073492-626.0-0-0@rt.cpan.org>
Content-Type:	text/plain; charset="utf-8"
Content-Transfer-Encoding:	binary
X-RT-Original-Encoding:	utf-8
X-RT-Encrypt:	0
X-RT-Sign:	0
Content-Length:	677

cpanm HTML::StripScripts::Parser ... Successfully installed HTML-StripScripts-Parser-1.03 use HTML::StripScripts::Parser; my $val = '<a title="hey" target="_blank" rel="nofollow" href="http://www.google.com">www.google.com</a>'; my $hss = HTML::StripScripts::Parser->new({ Content => 'Flow', Rules => { a => { title => 1, href => 1, rel => 1, target => 1, }, }, }); say $hss->filter_html( $val ); Outputs: <a>www.google.com</a> Really? Nothing in the rules object is respected.

Tue Aug 13 03:12:25 2013 IRONCAMEL [...] cpan.org - Correspondence added

MIME-Version:	1.0
In-Reply-To:	<rt-4.0.16-29715-1376073492-626.0-0-0@rt.cpan.org>
X-Mailer:	MIME-tools 5.504 (Entity 5.504)
Content-Disposition:	inline
X-RT-Interface:	Web
References:	<rt-4.0.16-29715-1376073492-626.0-0-0@rt.cpan.org>
Content-Type:	text/plain; charset="utf-8"
Message-ID:	<rt-4.0.16-6324-1376377945-169.87747-0-0@rt.cpan.org>
Content-Transfer-Encoding:	binary
X-RT-Original-Encoding:	utf-8
RT-Send-CC:	andy@crowdtilt.com
X-RT-Encrypt:	0
X-RT-Sign:	0
Content-Length:	1755

On Fri Aug 09 14:38:12 2013, delvarworld wrote:

Show quoted text

> cpanm HTML::StripScripts::Parser > ... > Successfully installed HTML-StripScripts-Parser-1.03 > > use HTML::StripScripts::Parser; > > my $val = '<a title="hey" target="_blank" rel="nofollow" > href="http://www.google.com">www.google.com</a>'; > my $hss = HTML::StripScripts::Parser->new({ > Content => 'Flow', > Rules => { > a => { > title => 1, > href => 1, > rel => 1, > target => 1, > }, > > }, > }); > > say $hss->filter_html( $val ); > > Outputs: > > <a>www.google.com</a> > > Really? Nothing in the rules object is respected.

By default HTML::StripScripts only allows attributes "href" and "style" for "a" tags. If you would like it to allow other attributes, you need to extend HTML::StripScripts::Parser and override the init_attrib_whitelist method as so: package MyStripper; use Moo; extends 'HTML::StripScripts::Parser'; around init_attrib_whitelist => sub { my ($orig, $self) = @_; my $attr = $self->$orig(); $attr->{a}{target} = 'word'; $attr->{a}{title} = 'text'; $attr->{a}{rel} = 'word'; return $attr; }; my $hss = MyStripper->new({ Context => 'Flow', AllowHref => 1, Rules => { a => { href => qr{^http://www.google.com}, }, }, }); my $val = '<a title="hey" target="_blank" rel="nofollow" href="http://www.google.com">www.google.com</a>'; print $hss->filter_html($val); Outputs: <a href="http://www.google.com" rel="nofollow" target="_blank" title="hey">www.google.com</a> Best regards, Naveed Massjouni

Tue Aug 13 03:12:25 2013 The RT System itself - Status changed from 'new' to 'open'

Tue Aug 13 03:21:55 2013 IRONCAMEL [...] cpan.org - Correspondence added

MIME-Version:	1.0
In-Reply-To:	<rt-4.0.16-6324-1376377945-169.87747-0-0@rt.cpan.org>
X-Mailer:	MIME-tools 5.504 (Entity 5.504)
Content-Disposition:	inline
X-RT-Interface:	Web
References:	<rt-4.0.16-29715-1376073492-626.0-0-0@rt.cpan.org> <rt-4.0.16-6324-1376377945-169.87747-0-0@rt.cpan.org>
Content-Type:	text/plain; charset="utf-8"
Message-ID:	<rt-4.0.16-4906-1376378515-1746.87747-0-0@rt.cpan.org>
Content-Transfer-Encoding:	binary
X-RT-Original-Encoding:	utf-8
RT-Send-CC:	andy@crowdtilt.com
X-RT-Encrypt:	0
X-RT-Sign:	0
Content-Length:	2147

On Tue Aug 13 03:12:25 2013, IRONCAMEL wrote:

Show quoted text

> On Fri Aug 09 14:38:12 2013, delvarworld wrote:

> > cpanm HTML::StripScripts::Parser > > ... > > Successfully installed HTML-StripScripts-Parser-1.03 > > > > use HTML::StripScripts::Parser; > > > > my $val = '<a title="hey" target="_blank" rel="nofollow" > > href="http://www.google.com">www.google.com</a>'; > > my $hss = HTML::StripScripts::Parser->new({ > > Content => 'Flow', > > Rules => { > > a => { > > title => 1, > > href => 1, > > rel => 1, > > target => 1, > > }, > > > > }, > > }); > > > > say $hss->filter_html( $val ); > > > > Outputs: > > > > <a>www.google.com</a> > > > > Really? Nothing in the rules object is respected.

> > By default HTML::StripScripts only allows attributes "href" and > "style" for "a" tags. If you would like it to allow other attributes, > you need to extend > HTML::StripScripts::Parser and override the init_attrib_whitelist > method as so: > > package MyStripper; > use Moo; > extends 'HTML::StripScripts::Parser'; > > around init_attrib_whitelist => sub { > my ($orig, $self) = @_; > my $attr = $self->$orig(); > $attr->{a}{target} = 'word'; > $attr->{a}{title} = 'text'; > $attr->{a}{rel} = 'word'; > return $attr; > }; > > my $hss = MyStripper->new({ > Context => 'Flow', > AllowHref => 1, > Rules => { > a => { > href => qr{^http://www.google.com}, > }, > }, > }); > > my $val = '<a title="hey" target="_blank" rel="nofollow" > href="http://www.google.com">www.google.com</a>'; > print $hss->filter_html($val); > > Outputs: > > <a href="http://www.google.com" rel="nofollow" target="_blank" > title="hey">www.google.com</a> > > Best regards, > Naveed Massjouni

Note that this field href => qr{^http://www.google.com}, is not necessary, but it allows you to only allow hrefs matching the given regex. Also, see this for details about subclassing the whitelist methods: https://metacpan.org/module/HTML::StripScripts#WHITELIST-INITIALIZATION-METHODS -Naveed