Comments on: Strip Html Tags – with allowable tags

By: Andrei Ionescu

Andrei Ionescu — Sun, 07 Feb 2010 20:23:02 +0000

Thanks for your fix. Jörg. You mean line 58 in the whole source file but I guess it is line 36 in the code presented in the article.

By: Jörg

Jörg — Sat, 06 Feb 2010 22:39:51 +0000

Got it: replace line 58 with this

var tmpRE:RegExp = new RegExp("([\+\*\$\/\?])","g");

By: Jörg

Jörg — Sat, 06 Feb 2010 22:29:53 +0000

Hi! I found a strange behaviour in the code: If you try to strip the 'a' tags in the following String

google.com/?i

you will get

google.com/?ig

It's because of the "?" character I think, but so far I have no solution for it. I will post back if I find one. Cheers

By: yoav

yoav — Sat, 23 Jan 2010 21:04:35 +0000

Glad I could help evolve it. The changes you made are great because it lets you specify p as an allowable tag while using attributes like style=”color:#0000FF;”, but in the specific application I’m using it in I need stricter control. I can’t reproduce the closing tags not being removed issue though.

My changes still work for me in cases where you just want certain bare tags to get through. I guess it depends on the situation. Thanks for letting me know, also the working example you posted is very useful.

By: Andrei Ionescu

Andrei Ionescu — Sat, 23 Jan 2010 17:43:48 +0000

Hello Yoav! Just fIxed my code and created a working application. Tested your solution and found that sometimes it doesn’t remove the closing tags (, for example). So I found another better way fixing the bug you discovered. Thank you very much for your real help.

By: Andrei Ionescu

Andrei Ionescu — Fri, 22 Jan 2010 22:33:37 +0000

Thanks Yoav! I’ll fix my code too.

By: yoav

yoav — Fri, 22 Jan 2010 20:01:11 +0000

Here I fixed it http://fightskillz.com/2010/01/flexactionscript-3-0-strip-html-tags-function/

By: yoav

yoav — Fri, 22 Jan 2010 19:04:19 +0000

the function doesn’t work in that if you specify i as an allowable tag, it also allows iframe because the regular expressions see the i in iframe and consider it safe. this is incredibly insecure. i can’t believe in a year and a half nobody noticed this.

By: mac

mac — Tue, 19 Jan 2010 03:26:52 +0000

I love you!
I soooo needed that piece of code!

Thanks

By: Michael

Michael — Tue, 12 Jan 2010 09:10:17 +0000

This is awesome m8! thnx very much!
Helps when using the mailto: urlRequest since taged htmlText doesn’t display nicelly or at all!