htmlparser2#Tokenizer.prototype._stateInNamedEntity bug

source:

Tokenizer.prototype._stateInNamedEntity = function(c){
        if(c === ";"){
                this._parseNamedEntityStrict();
                if(this._sectionStart + 1 < this._index && !this._xmlMode){
                        this._parseLegacyEntity();
                }
                this._state = this._baseState;
        } else if((c < "a" || c > "z") && (c < "A" || c > "Z") && (c < "0" || c > "9")){
                if(this._xmlMode);
                else if(this._sectionStart + 1 === this._index);
                else if(this._baseState !== TEXT){ 
                        if( c !== "="){
                                this._parseNamedEntityStrict();  // this is a bug line.
                       }
                } else {
                        this._parseLegacyEntity();
                }
                this._state = this._baseState;
                this._index--;
        }
};

input: &trade_type=xxx,  the  c is "_",
output: ?type=xxx

fix: if((c < "a" || c > "z") && (c < "A" || c > "Z") && (c < "0" || c > "9"))
and  c !== "="
do nothing!

郑重声明:本站内容如果来自互联网及其他传播媒体,其版权均属原媒体及文章作者所有。转载目的在于传递更多信息及用于网络分享,并不代表本站赞同其观点和对其真实性负责,也不构成任何其他建议。