Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Version: 1.06 12. September, 2003
This is a Ruby library for building trees representing HTML structure.
See the file INSTALL for installation instructions.
Copyright (C) 2003, Johannes Brodwall johannes@brodwall.com Copyright (C) 2002, Ned Konz ned@bike-nomad.com
License: Ruby's
See http://rubyforge.org/projects/ruby-htmltools for the most recent version.
This project includes SGML-parser, ported from Python by Takahiro Maebashi maebashi@iij.ad.jp (see: http://www.jin.gr.jp/~nahi/Ruby/html-parser/README.html)
Ruby 1.8
The tests run using Test::Unit. Test::Unit is part of the standard Ruby install as of 1.8
XPath support requires REXML. REXML is part of the standard Ruby install as of 1.8
Made sure that unknown entities and characters are not discarded, in both html/tree.rb and html/xmltree.rb
Added handling of DOCTYPE to html/xmltree.rb
Added HTMLTree::XMLParser, which makes a REXML document from the given HTML.
Changed HTMLTree::Element::print_on() to write()
Made it so that a string or IO can be passed to HTMLTree::Element::dump()
Made it so that a string or IO can be passed to HTMLTree::Element::write()
added XPath and XML conversion (needs REXML)
Wrapped all code in namespaces. The following class names have changed:
-- in html/element.rb HTMLDocument => HTMLTree::Document HTMLElement => HTMLTree::Element HTMLData => HTMLTree::Data HTMLComment => HTMLTree::Comment HTMLSpecial => HTMLTree::Special
-- in html/tags.rb HTMLTag => HTML::Tag HTMLBlockTag => HTML::BlockTag HTMLInlineTag => HTML::InlineTag HTMLBlockOrInlineTag => HTML::BlockOrInlineTag HTMLEmptyTag => HTML::EmptyTag
-- in html/tree.rb HTMLTreeParser => HTMLTree::Parser
-- in html/stparser.rb StackingParser => HTML::StackingParser
added HTMLTree::Element.root()
documented change to sgml-parser.
added bin/ebaySearch.rb example
attributes now maintain their order. Though this probably isn't strictly necessary under HTML, it may make it easier to compare document versions.
the generated tree now has a top-level node for the document itself, so the DTD can be stored. THIS WILL REQUIRE CODE CHANGES if you have code that assumes that the root node is always . To find the
node, you can use the new methods HTMLTreeParser#html() or HTMLDocument#html_node():html = parser.html()
Or, querying the tree:
html = parser.tree.html_node()
comments are stored in the tree
added HTMLElement#print_on() to print a (sub)tree to an IO stream
vim: ts=2 sw=2 et
FAQs
Unknown package
We found that htmltools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.