Java replaces all non-HTML tags with String

Question

I would like to replace all tag-looking parts in String if they are not valid HTML tags. The part similar to the tag is enclosed in brackets <> . For instance. < [e-mail] > or <hello> , but <br> , <div> , etc. need to save.

Do you have any ideas how to achieve this?

Any help is appreciated!

amuses

Bolage

Answer 1

You can use JSoup to clear the HTML.

 String cleaned = Jsoup.clean(html, Whitelist.relaxed()); 

You can use one of the defined whitelists or create your own custom one, in which you specify which HTML elements you want to allow through the cleaner. Everything else is deleted.

---

Your specific example:

 String html = "one two three <blabla> four <text> five <div class=\"bold\">six</div>"; String cleaned = Jsoup.clean(html, Whitelist.relaxed().addAttributes("div", "class")); System.out.println(cleaned); 

Output:

 one two three four five <div class="bold"> six </div> 

Answer 2

Look at the java.util.Scanner class — you can set the delimiter, and then see if the string matches the HTML tag or not — you will need to build an array of strings that should be ignored.

Answer 3

You can also include end tags in your comparison algorithm. So you may want to find the slash (html end tag) and break it before comparing.

Answer 4

If you do this to display untrusted data on a web page, simply removing the invalid tags is not enough. Take a look at OWASP AntiSamy .