Question

Some HTML forms are filled by users using copy&paste from MSWord, in FCK editors, or others. This generates nasty tags annoying other tools to work fine. Is there a way the server can clean the incoming parameters, so nasty HTML tags would be removed?

当然,只要用户能够书写任何东西,定期表达是不有用的。

我指的是专门从事这项工作的 Java类。

举例来说,所有这些可能都可以用真空扼制来取代。

<p><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:HyphenationZone>21</w:HyphenationZone>
<w:PunctuationKerning />
<w:ValidateAgainstSchemas />
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables />
<w:SnapToGridInCell />
<w:WrapTextWithPunct />
<w:UseAsianBreakRules />
<w:DontGrowAutofit />
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]--></p>

Answer 1

https://code.google.com/p/owasp-java-html-sanitizer/“rel=“nofollow”https://code.google.com/p/owasp-java-html-sanitizer/

import org.owasp.html.PolicyFactory;
import org.owasp.html.Sanitizers;

而建立html只接受政策。除你所说的话外,这将消除一切。不仅如此,这也将消除言辞。 Html garbage公司还将保护你从xs那里获得的html投入。

PolicyFactory policy = (new HtmlPolicyBuilder().allowElements("table", "tr", "td", "th").allowAttributes("style").globally()).toFactory();
        policy = policy.and(Sanitizers.FORMATTING).and(Sanitizers.BLOCKS).and(Sanitizers.IMAGES).and(Sanitizers.LINKS);

String safeHtml = policy.sanitize(html);

JTidy的问题是,这个问题可能非常缓慢。与此相比,html的净化剂相对较快。

Answer 2

FCKEditor has a "paste from word" button that works very well. Could you ask your users to use this functionality?

Answer 3

You could try JTidy. It s a Java port of HTMLtidy, which can do the type of cleanup you re looking for. Caveat emptor: I haven t used JTidy and I have no idea how well it works.

Answer 4

最新版本的CKEditor支持从字句中 past出的汽车探测,这意味着他们不得不使用ton子,即使 but子在那里。它将发现从字面上重复,并提议加以清理或改成直截面。

Answer 5

cx4j生产干净的超文本,专门用于通过CKEditor进行往返。

友情链接