mirrors/CyberChef
1
0
Fork 0
mirror of https://github.com/gchq/CyberChef.git synced 2025-06-14 10:14:53 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Encoding HTML entities as well as ensuring no script tags slip by

Browse source
This commit is contained in:
Glenn R. Martin 2025-06-09 00:02:01 -04:00
parent dd583a4943
commit 0b913d070a
1 changed files with 22 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

29
src/core/operations/ParseAITokens.mjs
View file

@ -95,7 +95,8 @@ class ParseAITokens extends Operation {
const tokenHtml = tokens.map((t, i) => {
const tok =
t.replaceAll(" ", "\u00A0")
t.replace(/[\u00A0-\u9999<>&]/g, i => "&#"+i.charCodeAt(0)+";")
.replaceAll(" ", "\u00A0")
.replaceAll("\n", "<newline>");
const css = [
@ -127,21 +128,29 @@ class ParseAITokens extends Operation {
};
/**
* Replace all space not starting within the HTML tag.
* @param {string} htmlString
* @returns {string}
* Replace spaces outside HTML tags and sanitize <script> tags.
* @param {string} htmlString - The input HTML string.
* @returns {string} - The sanitized and formatted HTML string.
*/
replaceSpacesOutsideTags(htmlString) {
return htmlString.replace(/(<[^>]*?>)|(\s+)/g, function(match, tag, spaces) {
if (tag) {
return tag;
return htmlString
.replace(/(<script\b[^>]*>.*?<\/script>)|(<[^>]*?>)|(\s+)/gi, (match, scriptTag, htmlTag, spaces) => {
if (scriptTag) {
// Sanitize the <script> tag by escaping it
return scriptTag
.replace(/</g, "&lt;")
.replace(/>/g, "&gt;");
} else if (htmlTag) {
// Leave other HTML tags unchanged
return htmlTag;
} else if (spaces) {
// Replace spaces outside tags
return "";
}
}).replace(/[\r\n]/g, "");
};
})
.replace(/[\r\n]/g, "");
}
}
export default ParseAITokens;