sanitizing html tags (content)

[Aljaz Fajmut]

Hello,

I have a variable which holds the following html code:

<object width="425" height="344"><param name="movie"
value="

"></param><param
name="allowFullScreen" value="true"></param><param
name="allowscriptaccess" value="always"></param><embed
src="

"
type="application/x-shockwave-flash" allowscriptaccess="always"
allowfullscreen="true" width="425" height="344"></embed></object>
<span>some text<a href="..">link</a> .. </span>


Now I'd like to process it so that everything would be stripped except
object/param/embed tags (span tag and its content should be removed).

What is the best way to compliment that?

I've installed sanitize gem but it wont allow me to strip/remove content
inside html tags as well.

I though of regex but I'm unsure about this.

Many thanks for help!

 

[Tim Pease]

Hello,

I have a variable which holds the following html code:

<object width="425" height="344"><param name="movie"
value="

"></
param><param
name="allowFullScreen" value="true"></param><param
name="allowscriptaccess" value="always"></param><embed
src="

"
type="application/x-shockwave-flash" allowscriptaccess="always"
allowfullscreen="true" width="425" height="344"></embed></object>
<span>some text<a href="..">link</a> .. </span>


Now I'd like to process it so that everything would be stripped except
object/param/embed tags (span tag and its content should be removed).

What is the best way to compliment that?

I've installed sanitize gem but it wont allow me to strip/remove
content
inside html tags as well.

I though of regex but I'm unsure about this.

Many thanks for help!

Have a look at nokogiri. It will parse the HTML for you and you can
then tinker with it as you please. After you're done, just write it
back out as a string.

Blessings,
TwP

 

[Mike Dalessio]

[Note: parts of this message were removed to make it a legal post.]

On Oct 22, 2009, at 12:03 PM, Aljaz Fajmut wrote:

Hello,

Please don't use regexes. Think of the children!

Instead, try Loofah, which is based on Nokogiri and has some nice
sanitization helpers:

http://loofah.rubyforge.org/

Good luck!