blocks|key|782046|text|在ActionView::Helpers::SanitizeHelper中有一个strip_tags方法|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|782047|http://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-strip_tags|782048|编辑:为了获取value属性中的文本，可以使用类似于Nokogiri的Xpath表达式从字符串中获取文本。|782049|entityMap|0|LINK|mutability|MUTABLE|url^0|1|Z|14|A|0|0|2L|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|V|8|@]|D|@$9|W|A|X|1|Y]]|E|$]]|$1|H|3|I|5|6|7|Z|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|G]]]]

<p>There's a <code>strip_tags</code> method in <code>ActionView::Helpers::SanitizeHelper</code>:</p>

<p><a href="http://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-strip_tags" rel="noreferrer">http://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-strip_tags</a></p>

<p>Edit: for getting the text inside the value attribute, you could use something like Nokogiri with an Xpath expression to get that out of the string.</p>


blocks|key|782090|text|如果我们想在模型中使用它|type|unstyled|depth|inlineStyleRanges|entityRanges|data|782091|ActionView::Base.full_sanitizer.sanitize(html_string)|code-block|syntax|javascript|782092|这是"strip_tags“方法中的代码|782093|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

<p>If we want to use this in model</p>

<pre><code>ActionView::Base.full_sanitizer.sanitize(html_string)
</code></pre>

<p>which is the code in "strip_tags" method</p>


blocks|key|566010|text|是的，调用这个：sanitize(html_string,+tags:[])|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|566011|entityMap^0|8|U|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

<p>Yes, call this: <code>sanitize(html_string, tags:[])</code></p>


blocks|key|782176|text|这个怎么样？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|782177|white_list_sanitizer+=+Rails::Html::WhiteListSanitizer.new
WHITELIST+=+['p','b','h1','h2','h3','h4','h5','h6','li','ul','ol','small','i','u']


[Your,+Models,+Here].each+do+%7Cklass%7C+
++klass.all.each+do+%7Cob%7C+
++++klass.attribute_names.each+do+%7Cattrs%7C
++++++if+ob.send(attrs).is_a?+String
++++++++ob.send("#{attrs}=",+white_list_sanitizer.sanitize(ob.send(attrs),+tags:+WHITELIST,+attributes:+%25w(id+style)).gsub(/<p>\s*<\/p>\r\n/im,+''))
++++++++ob.save
++++++end
++++end
++end
end|code-block|syntax|javascript|782178|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

<p>How about this?</p>

<pre><code>white_list_sanitizer = Rails::Html::WhiteListSanitizer.new
WHITELIST = ['p','b','h1','h2','h3','h4','h5','h6','li','ul','ol','small','i','u']


[Your, Models, Here].each do |klass| 
  klass.all.each do |ob| 
    klass.attribute_names.each do |attrs|
      if ob.send(attrs).is_a? String
        ob.send("#{attrs}=", white_list_sanitizer.sanitize(ob.send(attrs), tags: WHITELIST, attributes: %w(id style)).gsub(/&lt;p&gt;\s*&lt;\/p&gt;\r\n/im, ''))
        ob.save
      end
    end
  end
end
</code></pre>


blocks|key|566085|text|我使用过Loofah库，因为它既适用于HTML，也适用于XML+(包括文档和字符串片段)。它是html+sanitizer+gem背后的引擎。我只是简单地粘贴代码示例，以显示它的使用有多么简单。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|566086|Loofah+Gem|offset|length|566087|unsafe_html+=+"ohai!+<div>div+is+safe</div>+<script>but+script+is+not</script>"

doc+=+Loofah.fragment(unsafe_html).scrub!(:strip)
doc.to_s++++#+=>+"ohai!+<div>div+is+safe</div>+"
doc.text++++#+=>+"ohai!+div+is+safe+"|code-block|syntax|javascript|566088|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/flavorjones/loofah^0|0|0|A|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@$D|U|E|V|1|W]]|A|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

<p>I've used the Loofah library, as it is suitable for both HTML and XML (both documents and string fragments). It is the engine behind the html sanitizer gem. I'm simply pasting the code example to show how simple it is to use.</p>

<p><a href="https://github.com/flavorjones/loofah" rel="noreferrer">Loofah Gem</a></p>

<pre><code>unsafe_html = "ohai! &lt;div&gt;div is safe&lt;/div&gt; &lt;script&gt;but script is not&lt;/script&gt;"

doc = Loofah.fragment(unsafe_html).scrub!(:strip)
doc.to_s    # =&gt; "ohai! &lt;div&gt;div is safe&lt;/div&gt; "
doc.text    # =&gt; "ohai! div is safe "
</code></pre>


blocks|key|782306|text|这对我来说在rails+6.1.3中是有效的：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|782307|.errors-description
++=+sanitize(message,+tags:+%25w[div+span+strong],+attributes:+%25w[class])|code-block|syntax|javascript|782308|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

<p>This is working for me in rails 6.1.3:</p>
<pre><code>.errors-description
  = sanitize(message, tags: %w[div span strong], attributes: %w[class])
</code></pre>


<p>I'm working with Ruby on Rails, Is there a way to strip <code>html</code> from a string using sanitize or equal method and keep only text inside value attribute on input tag?</p>


Strip html from string Ruby on Rails

我正在使用Ruby on Rails，有没有一种方法可以使用sanitize或equal方法从字符串中剥离html，并且只在输入标记的值属性中保留文本？

问从字符串Ruby on Rails中剥离html
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从字符串Ruby on Rails中剥离htmlEN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从字符串Ruby on Rails中剥离html
EN