Is it correct that when using sanitize.HTML the HTML

Sanitizing <p>1 < 2</p> I'm getting <c

lt, gt chars parsing inside a tag about sanitize HOT 3 CLOSED

kennygrant commented on August 22, 2024

lt, gt chars parsing inside a tag

from sanitize.

Comments (3)

kennygrant commented on August 22, 2024 1

I'm not sure that's valid html, you're supposed to escape less than signs (in html 5 at least). If you try validating this html here:

<!DOCTYPE html>
<html>
<head>
<title>asdf</title>
</head>
<body>
<p>1 < 2</p>
</body>
</html>

https://validator.w3.org/#validate_by_input

It will fail. It's hard for the parser to know if this is the start of a tag, or a less than sign, so the entity would be better. Browsers may try to work around it as they're used to broken html, but I would try to fix the html.

You could pre-process it by searching for ' < ' and replacing with ' < ', but I think I'd rather not do that in sanitize.

from sanitize.

kennygrant commented on August 22, 2024

What is accurately? What do you see, and what do you expect to see?

from sanitize.

iharsuvorau commented on August 22, 2024

Sanitizing <p>1 < 2</p> I'm getting 1 (with a space after the number) and I want to get 1 < 2. That's because the parser ignores everything after the < char even if it's not a HTML-tag.

from sanitize.

Recommend Projects

lt, gt chars parsing inside a tag about sanitize HOT 3 CLOSED

Comments (3)

Related Issues (7)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent