Function in_HTML

examples/contrib/xss_scanner.py:354–365

Whether the Numberth occurrence of the first string in the second string is inside the HTML but not inside a script tag or part of a HTML attribute

(text: bytes, index: int, body: bytes)

            return False

    def in_HTML(text: bytes, index: int, body: bytes) -> bool:
        """Whether the Numberth occurrence of the first string in the second
        string is inside the HTML but not inside a script tag or part of
        a HTML attribute"""
        # if there is a < then lxml will interpret that as a tag, so only search for the stuff before it
        text = text.split(b"<")[0]
        paths = paths_to_text(body.decode("utf-8"), text.decode("utf-8"))
        try:
            path = paths[index]
            return "script" not in path
        except IndexError:
            return False

    def inject_javascript_handler(html: str) -> bool:
        """Whether you can inject a Javascript:alert(0) as a link"""