Java替换String中的所有非HTML标记

Question

I'd like to replace all the tag-looking parts in a String if those are not valid HTML tags. A tag-looking part is something enclosed in <> brackets. Eg. <myemail@email.com> or <hello> but <br> , <div> , and so on has to be kept.

Do you have any idea how to achieve this?

Any help is appreciated!

cheers,

balázs

Answer 1

You can use JSoup to clean HTML.

String cleaned = Jsoup.clean(html, Whitelist.relaxed());

You can either use one of the defined Whitelists or you can create your own custom one in which you specify which HTML elements you wish to allow through the cleaner. Everything else is removed.

---

Your specific example would be:

String html = "one two three <blabla> four <text> five <div class=\"bold\">six</div>";
String cleaned = Jsoup.clean(html, Whitelist.relaxed().addAttributes("div", "class"));
System.out.println(cleaned);

Output:

one two three  four  five 
<div class="bold">
 six
</div>

Answer 2

看一下java.util.Scanner类 - 你可以设置一个分隔符，然后查看字符串是否与HTML标记匹配 - 你必须构建一个应该被忽略的字符串数组。

Answer 3

You may also want to include ending tags in your comparison algorithm. So you may want to look for a forward slash(html end tag) and strip it before your comparison.

Answer 4

If you do it in order to display untrusted data on the web page, simple removing of invalid tags is not enough. Take a look at OWASP AntiSamy .