In CGI forms, users type in text. Sometimes, users type in pseudo-HTML, like <I>, <BR>, <P> and all the other Perl Monks Approved HTML tags. Applications then display the typein, honoring the tags. But that text has to be cleaned up. To start with, unclosed tags have to be closed. But only certain tags should be allowed through – don't want <script> tags injecting javascript.
Is there a module for 'normalizing' the pseudo-HTML that a user types into a CGI? I didn't have much luck at CPAN, but I might not have been using the right search terms.
PerlMonks itself is a patched version of Everything2. I may muck through it and see what I can find. But I was hoping someone could point me to a standalone module.
thanks
throop
(Thanks to ikegami, snowhare and others in the CB who helped me articulate this.)
In reply to CGI Typein box for pseudo-HTML - is there a module? by throop
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |