�
�aabc @ s� d Z d d l Z d d l Z d d l Z y d d l m Z Wn! e k
ra d d l m Z n Xd d l m Z d d l
m Z d d l
m Z m
Z
d d l
m Z m Z y e Wn e k
r� e Z n Xy e Wn e k
r� e Z n Xy e Wn e k
re Z n Xy e Wn e k
r;e e f Z n Xd d d
d d d
d g Z e j d e j e j B� j Z e j d e j � j Z e j d e j d d k r�e j f n f � j Z! e j d e j � j" Z# e j d e j � j" Z$ e j d e j � j" Z% d � Z& e j d � j Z' e j d e j e j B� Z( e j) d � Z* e j) d d i e
d 6�Z+ d
e, f d � � YZ- e- � Z. e. j/ Z/ e j d e j � e j d e j � g Z0 d! d" d# d$ d% d& g Z1 e j d' e j � e j d( e j � e j d) � g Z2 d* g Z3 e0 e1 e2 e3 d+ � Z4 d, � Z5 d- � Z6 e4 j e6 _ d" d! d# g Z7 d. g Z8 d/ e7 e8 e d0 � d1 � Z9 d2 � Z: d3 � Z; e j d4 e j � Z< d5 � Z= d S(6 sc A cleanup tool for HTML.
Removes unwanted tags and content. See the `Cleaner` class for
details.
i����N( t urlsplit( t etree( t defs( t
fromstringt XHTML_NAMESPACE( t
xhtml_to_htmlt _transform_resultt
clean_htmlt cleant Cleanert autolinkt
autolink_htmlt
word_breakt word_break_htmls expression\s*\(.*?\)s
@\s*imports </?[a-zA-Z]+|\son[a-zA-Z]+\s*=i i s ^data:image/(.+);base64,s: (javascript|jscript|livescript|vbscript|data|about|mocha):s (xml|svg)c C sM t } x* t | � D] } t } t | � r t Sq W| r= t St t | � � S( N( t Falset _find_image_dataurlst Truet _is_unsafe_image_typet boolt _is_possibly_malicious_scheme( t st is_image_urlt
image_type( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyt _is_javascript_schemeV s s [\s\x00-\x08\x0B\x0C\x0E-\x19]+s \[if[\s\n\r]+.*?][\s\n\r]*>s descendant-or-self::*[@style]s� descendant-or-self::a [normalize-space(@href) and substring(normalize-space(@href),1,1) != '#'] |descendant-or-self::x:a[normalize-space(@href) and substring(normalize-space(@href),1,1) != '#']t
namespacest xc B sO e Z d Z e Z e Z e Z e Z d Z
e Z e Z e Z
e Z e Z e Z e Z e Z d Z d Z d Z e Z e Z e j Z e Z d Z e d d g � Z d � Z e d d d d d d d
g d d d d d d d d � Z d
� Z! d � Z" d � Z# d � Z$ d � Z% d d � Z& d � Z' e( j) d e( j* � j+ Z, d � Z- d � Z. RS( s
Instances cleans the document of each of the possible offending
elements. The cleaning is controlled by attributes; you can
override attributes in a subclass, or set them in the constructor.
``scripts``:
Removes any ``<script>`` tags.
``javascript``:
Removes any Javascript, like an ``onclick`` attribute. Also removes stylesheets
as they could contain Javascript.
``comments``:
Removes any comments.
``style``:
Removes any style tags.
``inline_style``
Removes any style attributes. Defaults to the value of the ``style`` option.
``links``:
Removes any ``<link>`` tags
``meta``:
Removes any ``<meta>`` tags
``page_structure``:
Structural parts of a page: ``<head>``, ``<html>``, ``<title>``.
``processing_instructions``:
Removes any processing instructions.
``embedded``:
Removes any embedded objects (flash, iframes)
``frames``:
Removes any frame-related tags
``forms``:
Removes any form tags
``annoying_tags``:
Tags that aren't *wrong*, but are annoying. ``<blink>`` and ``<marquee>``
``remove_tags``:
A list of tags to remove. Only the tags will be removed,
their content will get pulled up into the parent tag.
``kill_tags``:
A list of tags to kill. Killing also removes the tag's content,
i.e. the whole subtree, not just the tag itself.
``allow_tags``:
A list of tags to include (default include all).
``remove_unknown_tags``:
Remove any tags that aren't standard parts of HTML.
``safe_attrs_only``:
If true, only include 'safe' attributes (specifically the list
from the feedparser HTML sanitisation web site).
``safe_attrs``:
A set of attribute names to override the default list of attributes
considered 'safe' (when safe_attrs_only=True).
``add_nofollow``:
If true, then any <a> tags will have ``rel="nofollow"`` added to them.
``host_whitelist``:
A list or set of hosts that you can use for embedded content
(for content like ``<object>``, ``<link rel="stylesheet">``, etc).
You can also implement/override the method
``allow_embedded_url(el, url)`` or ``allow_element(el)`` to
implement more complex rules for what can be embedded.
Anything that passes this test will be shown, regardless of
the value of (for instance) ``embedded``.
Note that this parameter might not work as intended if you do not
make the links absolute before doing the cleaning.
Note that you may also need to set ``whitelist_tags``.
``whitelist_tags``:
A set of tags that can be included with ``host_whitelist``.
The default is ``iframe`` and ``embed``; you may wish to
include other tags like ``script``, or you may want to
implement ``allow_embedded_url`` for more control. Set to None to
include all tags.
This modifies the document *in place*.
t iframet embedc K s� xR | j � D]D \ } } t | | � sA t d | | f � � n t | | | � q
W| j d k r d | k r | j | _ n d S( Ns Unknown parameter: %s=%rt inline_style( t itemst hasattrt TypeErrort setattrR t Nonet style( t selft kwt namet value( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyt __init__� s t scriptt srct linkt hreft applett codet objectt layert ac C s� t | d � r | j � } n t | � x | j d � D] } d | _ q8 W| j sd | j | � n t | j ps d( � } t | j p� d) � } t | j
p� d* � } | j r� | j d � n | j
r*t | j � } xS | j t j � D]< } | j } x* | j � D] } | | k r| | =qqWq� Wn | j r | j
oK| j t j k s�xV | j t j � D]? } | j } x- | j � D] } | j d � r}| | =q}q}WqaWn | j | j d t �| j sHx t | � D]n } | j d � } t d | � }
t d |
� }
| j |
� r"| j d =q�|
| k r�| j d |
� q�q�Wn | j s x� t | j d � � D]� } | j d d � j! � j" � d
k r�| j# � qgn | j$ p�d } t d | � }
t d |
� }
| j |
� r�d | _$ qg|
| k rg|
| _$ qgqgWq n | j s | j% r0| j t j& � n | j% rL| j t j' � n | j re| j d � n | j r�t j( | d � n | j) r�| j d � nr | j s�| j r x] t | j d � � D]C } d
| j d d � j! � k r�| j* | � s| j# � qq�q�Wn | j+ r%| j d � n | j, r>| j- d+ � n | j. r�xv t | j d � � D]_ } t } | j/ � } x+ | d' k r�| j d, k r�| j/ � } qxW| d' k r]| j# � q]q]W| j- d- � | j- d. � n | j1 r�| j- t j2 � n | j3 r | j d � | j- d/ � n | j4 r8| j- d0 � n g }
g } x| | j � D]n } | j | k r�| j* | � r{qQn | j5 | � qQ| j | k rQ| j* | � r�qQn |
j5 | � qQqQW|
r|
d | k r|
j6 d � } d! | _ | j j7 � nM | rN| d | k rN| j6 d � } | j d k rAd! | _ n | j7 � n | j8 � x | D] } | j# � q_Wx |
D] } | j9 � qzW| j: r�| r�t; d" � � n t t j< � } n | r_g } x3 | j � D]% } | j | k r�| j5 | � q�q�W| r_| d | k r>| j6 d � } d! | _ | j j7 � n x | D] } | j9 � qEWq_n | j= r�x� t> | � D]r } | j? | � su| j d � } | r�d# | k r�d$ d% | k r�qun d& | } n d# } | j d | � ququWn d' S(1 s&
Cleans the document.
t getroott imaget imgR( t ont resolve_base_hrefR" t t types text/javascripts
/* deleted */R* t
stylesheett relt metat headt htmlt titlet paramR, R. R R R/ t formt buttont inputt selectt textareat blinkt marqueei t divsI It does not make sense to pass in both allow_tags and remove_unknown_tagst nofollows
nofollow s %s s %s nofollowN( ( ( ( R; R< R= ( R, R. ( R, ( R R R/ R. R> ( R@ RA RB RC ( RD RE (@ R R1 R t itert tagt commentst kill_conditional_commentst sett kill_tagst remove_tagst
allow_tagst scriptst addt safe_attrs_onlyt
safe_attrsR t Elementt attribt keyst
javascriptR t
startswitht
rewrite_linkst _remove_javascript_linkR R t _find_styled_elementst gett _replace_css_javascriptt _replace_css_importt _has_sneaky_javascriptR" t listt lowert stript drop_treet textt processing_instructionst Commentt ProcessingInstructiont strip_attributest linkst
allow_elementR: t page_structuret updatet embeddedt getparentR! t framest
frame_tagst formst
annoying_tagst appendt popt cleart reverset drop_tagt remove_unknown_tagst
ValueErrort tagst add_nofollowt _find_external_linkst allow_follow( R# t doct elRM RN RO RS RU t anamet oldt newt found_parentt parentt _removet _killt badR9 ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyt __call__ s
$
c C s t S( sF
Override to suppress rel="nofollow" on some anchors.
( R ( R# t anchor( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR} � s c C s� | j | j k r t S| j | j } t | t t f � r x= | D]5 } | j | � } | sa t S| j | | � sB t SqB Wt S| j | � } | s� t S| j | | � Sd S( N( RI t _tag_link_attrsR t
isinstanceR` t tupleR\ t allow_embedded_urlR ( R# R t attrt one_attrt url( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyRj � s
c C s� | j d k r% | j | j k r% t St | � \ } } } } } | j � j d d � d } | d k rl t S| | j k r t St S( Nt :i i t httpt https( R� R� ( t whitelist_tagsR! RI R R Ra t splitt host_whitelistR ( R# R R� t schemet netloct patht queryt fragment( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR� � s c C s# g } | j | d � t j � d S( s�
IE conditional comments basically embed HTML that the parser
doesn't normally see. We can't allow anything like that, so
we'll kill any comments that could be conditional.
c S s t j | j � S( N( t _conditional_comment_ret searchRd ( R ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyt <lambda>� R6 N( t _kill_elementsR Rf ( R# R~ R� ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyRK � s c C s[ g } x3 | j | � D]" } | | � r | j | � q q Wx | D] } | j � qC Wd S( N( RH Rs Rc ( R# R~ t conditiont iterateR� R ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR� � s
c C s# t d | � } t | � r d S| S( NR6 ( t _substitute_whitespaceR ( R# R* R� ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyRZ � s s /\*.*?\*/c C s� | j d | � } | j d d � } t d | � } | j � } d | k rO t Sd | k r_ t Sd | k ro t Sd | k r t St | � r� t St S( s�
Depending on the browser, stuff like ``e x p r e s s i o n(...)``
can get interpreted, or ``expre/* stuff */ssion(...)``. This
checks for attempt to do stuff like this.
Typically the response will be to kill the entire style; if you
have just a bit of Javascript in the style another rule will catch
that and remove only the Javascript from the style; this catches
more sneaky attempts.
R6 s \s javascript:s expression(s @imports
</noscript( t _substitute_commentst replaceR� Ra R t _looks_like_tag_contentR ( R# R" ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR_ � s c C sP t | � } t | t � r* t | � } n t j | � } | | � t | | � S( N( R7 R� t
basestringR t copyt deepcopyR ( R# R< t result_typeR~ ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR s
N( (/ t __name__t
__module__t __doc__R RP RW RJ R R" R! R Ri R: Rk Re Rm Ro Rq Rr RN RO RM Rx RR R RS R{ R� RL R� R' t dictR� R� R} Rj R� RK R� RZ t ret compilet St subR� R_ R ( ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR o sT ] � sb (?P<body>https?://(?P<host>[a-z0-9._-]+)(?:/[/\-_.,a-z0-9%&?;=~]*)?(?:\([/\-_.,a-z0-9%&?;=~]*\))?)s9 mailto:(?P<body>[a-z0-9._-]+@(?P<host>[a-z0-9_.-]+[a-z]))RC t preR- R; RB R0 s
^localhosts \bexample\.(?:com|org|net)$s ^127\.0\.0\.1$t nolinkc C sG | j | k r d S| j d � } | rX | j � } x! | D] } | | k r; d Sq; Wn x� t | � D]� } t | d | d | d | d | �| j re t | j | | d | j �\ } } | r� | | _ | j | � }
| | |
d |
d +q� qe qe W| j rCt | j | | d | j �\ } } | rC| | _ | | d *qCn d S(
s
Turn any URLs into links.
It will search for links identified by the given regular
expressions (by default mailto and http(s) links).
It won't link text in an element in avoid_elements, or an element
with a class in avoid_classes. It won't link to anything with a
host that matches one of the regular expressions in avoid_hosts
(default localhost and 127.0.0.1).
If you pass in an element, the element's tail will not be
substituted, only the contents of the element.
Nt classt link_regexest avoid_elementst avoid_hostst
avoid_classest factoryi i (
RI R\ R� R` R
t tailt
_link_textt makeelementt indexRd ( R R� R� R� R� t
class_namet match_classt childRd t
tail_childrenR� t pre_children( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR
6 s4
! ! c C s$ d } g } d } xd \ } } x� | D]� } | }
xi | j | d |
�} | d k r\ Pn | j d � } x. | D]% }
|
j | � rr | j � }
Pqr qr WPq7 W| d k r� q( n | d k s� | j � | k r( | } | j � } q( q( W| d k r| r | | d _ n | } Pn | j d � } | j � } | j d � sN| j d � re| d 8} | d } n | | j � } | r�| | d _ n | } | d � } | j d
| � | j d � } | s�| } n | j d � s�| j d � r�| d } n | | _ | j | � | | } q W| | f S(
NR6 i t post hosti����t .t ,i R0 R+ t body( NN(
R! R� t groupt endt startR� t endswithRL Rd Rs ( Rd R� R� R� t leading_textRi t last_post
best_matcht best_post regext regex_post matchR� t
host_regexR* R� t prev_textR� R� ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR� c s^
c O sV t | � } t | t � r* t | � } n t j | � } t | | | � t | | � S( N( R7 R� R� R R� R� R
R ( R< t argsR$ R� R~ ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR � s t nobreaki( i c C s� | j t k r d S| j d � } | rn t } | j � } x$ | D] } | | k rA t } PqA qA W| rn d Sn | j r� t | j | | � | _ n xT | D]L } t | d | d | d | d | �| j r� t | j | | � | _ q� q� Wd S( s�
Breaks any long words found in the body of the text (not attributes).
Doesn't effect any of the tags in avoid_elements, by default
``<textarea>`` and ``<pre>``
Breaks words by inserting ​, which is a unicode character
for Zero Width Space character. This generally takes up no space
in rendering, but does copy as a space, and in monospace contexts
usually takes up space.
See http://www.cs.tut.fi/~jkorpela/html/nobr.html for a discussion
NR� t max_widthR� R� t break_character(
RI t _avoid_word_break_elementsR\ R R� R Rd t _break_textR R� ( R R� R� R� R� R� t
dont_breakt avoidR� ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR � s*
c O s5 t | � } t | � } t | | | � t | | � S( N( R7 R R R ( R< R� R$ R� R~ ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR
� s c C sZ | j � } xG | D]? } t | � | k r t | | | � } | j | | � } q q W| S( N( R� t lent
_insert_breakR� ( Rd R� R� t wordst wordt replacement( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR� � s
s [^a-z]c C s� | } d } x� t | � | k r� | | } t t j | � � } | r| | d } | j � | d k r| | | j � } q| n | | | 7} | t | � } q W| | 7} | S( NR6 i����i
( R� R` t _break_prefer_ret finditerR� ( R� t widthR� t orig_wordt resultR� t breakst
last_break( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyR� � s
(> R� R� R� t syst urlparseR t ImportErrort urllib.parset lxmlR t lxml.htmlR R R R R t unichrt NameErrort chrt unicodet strt bytesR� t __all__R� R� t IR� R] R^ t version_infot ASCIIR� R� t findallR R R R R� R� t XPathR[ R| R. R R R t
_link_regexest _avoid_elementst _avoid_hostst _avoid_classesR
R� R R� t _avoid_word_break_classesR R
R� R� R� ( ( ( s5 /usr/lib64/python2.7/site-packages/lxml/html/clean.pyt <module> s�
+
� � * : &