I am using Jess oup to configure user input from a form. In the form in question, a after How can you create If your teddyara just looks for plain text, then I think you should avoid plain text To be better than just HTML. To wit. The user's input It is, as you say, to analyze untrusted input HTML Designed for, and with reliable HTML elements, where the elements have been drafting & Lt; Textarea & gt; which is expected to be plain text when the form is submitted, then I clean the input with the
Jsoup.clean (textareaContents) ; However, because HTML ignores additional white space, will remove characters from precious white space from
Jsoup.clean () input. For example, if any
Textarea :
Hello Test
Jsoup.clean () , you will have:
Hello test
Jsoup.clean () white space Protect? I know that this is designed to parse the html and this is not html, is there a better option?
& lt; and
& gt; tag to
& amp; Lt; and
& amp; Gt; . Either on our output input (input may be secure so that you only need to think about it once.)
Comments
Post a Comment