2021-07-11 22:00:41 +02:00
|
|
|
# -*- mode: python -*-
|
|
|
|
|
# -*- coding: utf-8 -*-
|
2020-09-26 16:19:37 +02:00
|
|
|
|
2021-07-11 22:00:41 +02:00
|
|
|
##############################################################################
|
|
|
|
|
#
|
|
|
|
|
# Gestion scolarite IUT
|
|
|
|
|
#
|
|
|
|
|
# Copyright (c) 1999 - 2021 Emmanuel Viennet. All rights reserved.
|
|
|
|
|
#
|
|
|
|
|
# This program is free software; you can redistribute it and/or modify
|
|
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
|
|
|
# (at your option) any later version.
|
|
|
|
|
#
|
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
|
#
|
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
|
#
|
|
|
|
|
# Emmanuel Viennet emmanuel.viennet@viennet.net
|
|
|
|
|
#
|
|
|
|
|
##############################################################################
|
|
|
|
|
|
|
|
|
|
from html.parser import HTMLParser
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
"""HTML sanitizing function
|
|
|
|
|
used to clean user submitted HTML
|
|
|
|
|
(Python 3 only)
|
|
|
|
|
"""
|
|
|
|
|
|
|
|
|
|
# permet de conserver les liens
|
|
|
|
|
def html_to_safe_html(text, convert_br=True):
|
|
|
|
|
# text = html2safehtml(text, valid_tags=("b", "a", "i", "br", "p"))
|
|
|
|
|
# New version (jul 2021) with our own parser
|
|
|
|
|
text = convert_html_to_text(text)
|
2020-09-26 16:19:37 +02:00
|
|
|
if convert_br:
|
|
|
|
|
return newline_to_br(text)
|
|
|
|
|
else:
|
|
|
|
|
return text
|
|
|
|
|
|
|
|
|
|
|
2021-07-11 22:00:41 +02:00
|
|
|
def convert_html_to_text(s):
|
|
|
|
|
parser = HTMLSanitizer()
|
|
|
|
|
parser.feed(s)
|
|
|
|
|
return parser.text
|
|
|
|
|
|
|
|
|
|
|
2020-09-26 16:19:37 +02:00
|
|
|
def newline_to_br(text):
|
|
|
|
|
return text.replace("\n", "<br/>")
|
2021-07-11 22:00:41 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
class HTMLSanitizer(HTMLParser):
|
|
|
|
|
def __init__(self, allowed_tags=("i", "b", "em", "br", "p"), **kwargs):
|
|
|
|
|
super(HTMLSanitizer, self).__init__(**kwargs)
|
|
|
|
|
self.allowed_tags = set(allowed_tags)
|
|
|
|
|
self.text = ""
|
|
|
|
|
|
|
|
|
|
def handle_starttag(self, tag, attrs):
|
|
|
|
|
if tag in self.allowed_tags:
|
|
|
|
|
self.text += "<{} {}>".format(
|
|
|
|
|
tag, ", ".join(['{}="{}"'.format(k, v) for (k, v) in attrs])
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
def handle_endtag(self, tag):
|
|
|
|
|
if tag in self.allowed_tags:
|
|
|
|
|
self.text += "</" + tag + ">"
|
|
|
|
|
|
|
|
|
|
def handle_data(self, data):
|
|
|
|
|
self.text += data
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if __name__ == "__main__":
|
|
|
|
|
test_parser = HTMLSanitizer()
|
|
|
|
|
test_parser.feed("""<p>Hello world <b z="1" >gras</b> <i a="2">italique</i></p>""")
|
|
|
|
|
print(test_parser.text)
|
