Jsuop使用示例代码
使用jsoup HTML Cleaner 方法进行清除，但需要指定一个可配置的 Whitelist。http://jsoup.org/apidocs/org/jsoup/safety/Whitelist.html (Jsoup whitelist文档)
String unsafe = ??"<p><a href=‘http://example.com/‘ onclick=‘stealCookies()‘>Link</a></p>";String safe = Jsoup.clean(unsafe, Whitelist.basic());// now: <p><a href="http://example.com/" rel="nofollow">Link</a></p>
public class JsoupUtil {
??/**
???* 使用自带的basicWithImages 白名单
???* 允许的便签有a,b,blockquote,br,cite,code,dd,dl,dt,em,i,li,ol,p,pre,q,small,span,
???* strike,strong,sub,sup,u,ul,img
???* 以及a标签的href,img标签的src,align,alt,height,width,title属性
???*/
??private static final Whitelist whitelist = Whitelist.basicWithImages();
??/** 配置过滤化参数,不对代码进行格式化 */
??private static final Document.OutputSettings outputSettings = new Document.OutputSettings().prettyPrint(false);
??static {
?????// 富文本编辑时一些样式是使用style来进行实现的
?????// 比如红色字体 style="color:red;"
?????// 所以需要给所有标签添加style属性
?????whitelist.addAttributes(":all", "style");
??}
??public static String clean(String content) {
?????return Jsoup.clean(content, "", whitelist, outputSettings);
??}
??
??public static void main(String[] args) throws FileNotFoundException, IOException {
?????String text = "<a href=\"http://www.baidu.com/a\" onclick=\"alert(1);\">sss</a><script>alert(0);</script>sss";
?????System.out.println(clean(text));
??}
}Jsuop ?Whitelist
原文地址：https://www.cnblogs.com/gym333/p/9193098.html