/usr/share/perl5/HTML/StripScripts/Parser.pm is in libhtml-stripscripts-parser-perl 1.03-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 | package HTML::StripScripts::Parser;
use strict;
use vars qw($VERSION);
$VERSION = '1.03';
=head1 NAME
HTML::StripScripts::Parser - XSS filter using HTML::Parser
=head1 SYNOPSIS
use HTML::StripScripts::Parser();
my $hss = HTML::StripScripts::Parser->new(
{
Context => 'Document', ## HTML::StripScripts configuration
Rules => { ... },
},
strict_comment => 1, ## HTML::Parser options
strict_names => 1,
);
$hss->parse_file("foo.html");
print $hss->filtered_document;
OR
print $hss->filter_html($html);
=head1 DESCRIPTION
This class provides an easy interface to C<HTML::StripScripts>, using
C<HTML::Parser> to parse the HTML.
See L<HTML::Parser> for details of how to customise how the raw HTML is parsed
into tags, and L<HTML::StripScripts> for details of how to customise the way
those tags are filtered.
=cut
=head1 CONSTRUCTORS
=over
=item new ( {CONFIG}, [PARSER_OPTIONS] )
Creates a new C<HTML::StripScripts::Parser> object.
The CONFIG parameter has the same semantics as the CONFIG
parameter to the C<HTML::StripScripts> constructor.
Any PARSER_OPTIONS supplied will be passed on to the L<HTML::Parser>
init method, allowing you to influence the way the input is parsed.
You cannot use PARSER_OPTIONS to set the C<HTML::Parser> event handlers
(see L<HTML::Parser/Events>) since C<HTML::StripScripts::Parser>
uses all of the event hooks itself.
However, you can use C<Rules> (see L<HTML::StripScripts/Rules>) to customise
the handling of all tags and attributes.
=cut
use HTML::StripScripts;
use HTML::Parser;
use base qw(HTML::StripScripts HTML::Parser);
sub hss_init {
my ( $self, $cfg, @parser_options ) = @_;
$self->init(
@parser_options,
api_version => 3,
start_document_h => [ 'input_start_document', 'self' ],
start_h => [ 'input_start', 'self,text' ],
end_h => [ 'input_end', 'self,text' ],
text_h => [ 'input_text', 'self,text' ],
default_h => [ 'input_text', 'self,text' ],
declaration_h => [ 'input_declaration', 'self,text' ],
comment_h => [ 'input_comment', 'self,text' ],
process_h => [ 'input_process', 'self,text' ],
end_document_h => [ 'input_end_document', 'self' ],
# workaround for http://rt.cpan.org/NoAuth/Bug.html?id=3954
( $HTML::Parser::VERSION =~ /^3\.(29|30|31)$/
? ( strict_comment => 1 )
: ()
),
);
$self->SUPER::hss_init($cfg);
}
=back
=head1 METHODS
See L<HTML::Parser> for input methods, L<HTML::StripScripts> for output
methods.
=head2 C<filter_html()>
C<filter_html()> is a convenience method for filtering HTML already loaded
into a scalar variable. It combines calls to C<HTML::Parser::parse()>,
C<HTML::Parser::eof()> and C<HTML::StripScripts::filtered_document()>.
$filtered_html = $hss->filter_html($html);
=cut
#===================================
sub filter_html {
#===================================
my ( $self, $html ) = @_;
$self->parse($html);
$self->eof;
return $self->filtered_document;
}
=head1 SUBCLASSING
The C<HTML::StripScripts::Parser> class is subclassable. Filter objects
are plain hashes. The hss_init() method takes the same arguments as
new(), and calls the initialization methods of both C<HTML::StripScripts>
and C<HTML::Parser>.
See L<HTML::StripScripts/"SUBCLASSING"> and L<HTML::Parser/"SUBCLASSING">.
=head1 SEE ALSO
L<HTML::StripScripts>, L<HTML::Parser>, L<HTML::StripScripts::LibXML>
=head1 BUGS
None reported.
Please report any bugs or feature requests to
bug-html-stripscripts-parser@rt.cpan.org, or through the web interface at
L<http://rt.cpan.org>.
=head1 AUTHOR
Original author Nick Cleaton E<lt>nick@cleaton.netE<gt>
New code added and module maintained by Clinton Gormley
E<lt>clint@traveljury.comE<gt>
=head1 COPYRIGHT
Copyright (C) 2003 Nick Cleaton. All Rights Reserved.
Copyright (C) 2007 Clinton Gormley. All Rights Reserved.
=head1 LICENSE
This module is free software; you can redistribute it and/or modify it
under the same terms as Perl itself.
=cut
1;
|