forked from scinfu/SwiftSoup
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
10 changed files
with
29 additions
and
109 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,7 +2,7 @@ | |
| <img src="https://raw.githubusercontent.com/scinfu/SwiftSoup/master/swiftsoup.png" alt="SwiftSoup" title="SwiftSoup"> | ||
| </p> | ||
|
|
||
| [](https://bdsmovement.net/) | ||
|
|
||
|  | ||
| [](https://github.com/apple/swift-package-manager) | ||
|  | ||
|
|
@@ -12,9 +12,6 @@ | |
| [](http://cocoapods.org/pods/SwiftSoup) | ||
| [](http://twitter.com/scinfu) | ||
|
|
||
| [](https://bdsmovement.net/) | ||
|
|
||
|
|
||
| `SwiftSoup` is a pure Swift library, cross-platform (macOS, iOS, tvOS, watchOS and Linux!), for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jQuery-like methods. | ||
| `SwiftSoup` implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do. | ||
| * Scrape and parse HTML from a URL, file, or string | ||
|
|
@@ -214,46 +211,6 @@ do { | |
| } | ||
| ``` | ||
|
|
||
| If you supply a whole HTML document, with a `<head>` tag, the `clean(_: String, _: String, _: Whitelist)` method will just return the cleaned body HTML. | ||
| You can clean both `<head>` and `<body>` by providing a `Whitelist` for each tags. | ||
|
|
||
| ```swift | ||
| do { | ||
| let unsafe: String = """ | ||
| <html> | ||
| <head> | ||
| <title>Hey</title> | ||
| <script>console.log('hi');</script> | ||
| </head> | ||
| <body> | ||
| <p>Hello, world!</p> | ||
| </body> | ||
| </html> | ||
| """ | ||
|
|
||
| var headWhitelist: Whitelist = { | ||
| do { | ||
| let customWhitelist = Whitelist.none() | ||
| try customWhitelist | ||
| .addTags("meta", "style", "title") | ||
| return customWhitelist | ||
| } catch { | ||
| fatalError("Couldn't init head whitelist") | ||
| } | ||
| }() | ||
|
|
||
| let unsafeDocument: Document = try SwiftSoup.parse(unsafe) | ||
| let safe: String = try SwiftSoup.Cleaner(headWhitelist: headWhitelist, bodyWhitelist: .relaxed()) | ||
| .clean(unsafeDocument) | ||
| .html() | ||
| // now: <html><head><title>Hey</title></head><body><p>Hello, world!</p></body></html> | ||
| } catch Exception.Error(let type, let message) { | ||
| print(message) | ||
| } catch { | ||
| print("error") | ||
| } | ||
| ``` | ||
|
|
||
| ### Discussion | ||
| A cross-site scripting attack against your site can really ruin your day, not to mention your users'. Many sites avoid XSS attacks by not allowing HTML in user submitted content: they enforce plain text only, or use an alternative markup syntax like wiki-text or Markdown. These are seldom optimal solutions for the user, as they lower expressiveness, and force the user to learn a new syntax. | ||
|
|
||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters