Caja-HTML-Sanitizer - GitLite

KO | EN

gitlite — search

#python #hacktoberfest #ai #llm #golang #machine-learning #rust #deep-learning #macos #java #windows #awesome #vue #ios

Caja-HTML-Sanitizer

(★ 376)

Bundles Google Caja's HTML Sanitizer within a npm installable node.js module

파일 탐색기

최종 버전 다운로드 (.zip)

- html4.js
- uri.js
- - _mocha
  - mocha
- - index.js
  - mocha.css
  - mocha.js
  - package.json
  - Readme.md
- test-sanitizer.js
.gitignore
.npmignore
package.json
README.md
sanitizer.js

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/theSmaw/Caja-HTML-Sanitizer

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd Caja-HTML-Sanitizer

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Node.js

쉬움 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Node.js npm 명령어를 쓰려면 Node.js가 설치되어 있어야 합니다. LTS(장기지원) 버전을 추천합니다.

npm install sanitizer

package.json에 명시된 라이브러리들을 내려받아 설치합니다.

✅ 명령어 실행 후 터미널에 나타나는 주소(보통 http://localhost:3000 형태)를 브라우저에서 열어보세요.

이 레포의 README에 적힌 실제 명령어를 그대로 가져왔습니다.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Maintainers wanted

I don't have time to maintain this repo, and have long forgotten how any of it works.

If anyone would like to take on ownership, please let me know.

## Installation

```
npm install sanitizer
```

## Require

```
var sanitizer = require('sanitizer');
```

## Use

See /test/test-sanitzer.js for full documentation.

```
sanitizer.escape('your dirty string'); // Escapes HTML special characters in attribute values as HTML entities
```

```
var yourParser = sanitizer.makeSaxParser(yourHandler); // Given a SAX-like event handler, produce a function that feeds those events and a parameter to the event handler.
```

```
sanitizer.normalizeRCData('your dirty string'); // Escape entities in RCDATA that can be escaped without changing the meaning.
```

```
sanitizer.sanitize('your dirty string'); // Strips unsafe tags and attributes from html.
```

```
exports.unescapeEntities('your string'); // The plain text of a chunk of HTML CDATA which possibly containing.
```

## Caveats

It's use this at your own risk really - Caja HTML Sanitizer was written by people far cleverer than me. I have just repackaged it to solve a problem I had (sanitization on a Node server). It seems to work, and it passes all its tests in re-packaged form - however I don't fully understand its internals so cannot guarantee its security.

## More information

http://code.google.com/p/google-caja/source/browse/trunk/src/com/google/caja/plugin/html-sanitizer.js