Data::FormValidator::Filters::HTMLStrip - Filter that removes html tags from input


Data-FormValidator-Filters-HTMLStrip documentation Contained in the Data-FormValidator-Filters-HTMLStrip distribution.

Index


Code Index:

NAME

Top

Data::FormValidator::Filters::HTMLStrip - Filter that removes html tags from input

SYNOPSIS

Top

    use Data::FormValidator::Filters::HTMLStrip qw( html_strip );

    # Build a Data::FormValidator Profile:
    my $my_profile = {
        required => qw( text ),
        field_filters => {
            text => html_strip,
        },
    };

    # Be sure to use a CGI.pm object as the form input
    # when using this filter
    my $q = new CGI;
    my $dfv = Data::FormValidator->check($q,$my_profile);

DESCRIPTION

Top

This is a Data::FormaValidator filter that acts as a wrapper for HTML::Strip. It removes html tags from variable data to help protect against cross-site scripting attacks.

FILTERS

Top

html_strip

This will create a filter that will strip html tags from the value of filtered variables. This assists in protecting cross site scripting exploits from users attempting to embed html tags into input fields.

SEE ALSO

Top

Data::FormValidator

AUTHOR

Top

David Baxter <david@sitesuite.com.au>

CREDITS

Top

Thanks to SiteSuite (http://www.sitesuite.com.au) for funding the development of this plugin and for releasing it to the world.

LICENCE AND COPYRIGHT

Top

DISCLAIMER OF WARRANTY

Top

BECAUSE THIS SOFTWARE IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE SOFTWARE, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE SOFTWARE "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE SOFTWARE IS WITH YOU. SHOULD THE SOFTWARE PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR, OR CORRECTION.

IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/ORREDISTRIBUTE THE SOFTWARE AS PERMITTED BY THE ABOVE LICENCE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL, ORCONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE SOFTWARE (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE SOFTWARE TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.


Data-FormValidator-Filters-HTMLStrip documentation Contained in the Data-FormValidator-Filters-HTMLStrip distribution.
package Data::FormValidator::Filters::HTMLStrip;

use strict;
use HTML::Strip;

use vars qw( $VERSION @ISA @EXPORT @EXPORT_OK );

BEGIN {
    require Exporter;

    $VERSION = '0.13';

    @ISA = qw( Exporter );

    @EXPORT    = ();
    @EXPORT_OK = qw( html_strip );
}

sub html_strip {
    my %options = @_;
    return
          sub { return __clean_data( shift, %options ) };
}

sub __clean_data {
    my $data        = shift;
    my @the_rest    = @_;

    my $hs = HTML::Strip->new(@the_rest);
    my $clean = $hs->parse( $data );
    $hs->eof();
    $clean =~ s/>/&gt\;/g;
    $clean =~ s/</&lt\;/g;
    return $clean
}

1;

__END__