https://github.com/phith0n/python-xss-filter

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html
https://github.com/phith0n/python-xss-filter

htmlparser-purifier xss

Last synced: 17 days ago
JSON representation

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html

• Host: GitHub
• URL: https://github.com/phith0n/python-xss-filter
• Owner: phith0n
• Created: 2015-04-07T16:34:11.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2017-02-01T09:15:57.000Z (almost 8 years ago)
• Last Synced: 2024-10-14T11:19:10.239Z (about 1 month ago)
• Topics: htmlparser-purifier, xss
• Language: Python
• Size: 43 KB
• Stars: 117
• Watchers: 7
• Forks: 64
• Open Issues: 6
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# python-xss-filter

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html  

## Python 富文本XSS过滤类

@package python-xss-filter  

@version 0.2.0   

@link https://github.com/phith0n/python-xss-filter  

@since 20150407  

@copyright (c) Phithon All Rights Reserved  

Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html  

You can use it in all python web framework  

Written by Phithon  in 2015 and placed in the public domain.  

phithon  编写于20150407  

From: XDSEC  & 离别歌   

Demo: http://python-xss-filter.leavesongs.com  

Usage:

	

	import pxfilter

	parser = pxfilter.XssHtml()

	parser.feed('')

	parser.close()

	html = parser.getHtml()

	print html

### Requirements

Python 2.6+ or 3.2+  

Cannot defense xss in browser which is belowed IE7  

浏览器版本：IE7+ 或其他浏览器，无法防御IE6及以下版本浏览器中的XSS  

### BUGs

20150408 embed默认allowscriptaccess=never，改为强制allowscriptaccess=never  

20150408 移除dict.has_key，兼容python3.4，embed增加一些常规属性   

20150408 修改代码，减少代码耦合性，增加重用性。定义每个标签允许的属性更加简单，只需要增加、更改XssHtml.tags_own_attrs即可。  

20150826 tab改4空格，所有双下划线方法改为单下划线，以便继承  

20170201 将正则单独提取出来  

### Other

**pxfilter.py** 是过滤类所在的文件，其他文件是测试网站 http://python-xss-filter.leavesongs.com 的源代码。