Asp中去除脚本代码

‘================================================

‘ 显示解释函数，返回根据参数允许显示的格式字符串，具体调用方法可从后台管理获得

‘ 输入参数：

‘ s_Content : 要转换的数据字符串

‘ s_Filters : 要过滤掉的格式集，用逗号分隔多个

‘================================================

Function eWebEditor_DeCode(s_Content, sFilters)

Dim a_Filter, i, s_Result, s_Filters

eWebEditor_Decode = s_Content

If IsNull(s_Content) Then Exit Function

If s_Content = “” Then Exit Function

s_Result = s_Content

s_Filters = sFilters

‘ 设置默认过滤

If sFilters = “” Then s_Filters = “script,object”

a_Filter = Split(s_Filters, “,”)

For i = 0 To UBound(a_Filter)

s_Result = eWebEditor_DecodeFilter(s_Result, a_Filter(i))

Next

eWebEditor_DeCode = s_Result

End Function

<Script Language=JavaScript RunAt=Server>

//===============================================

// 单个过滤

// 输入参数：

// s_Content : 要转换的数据字符串

// s_Filter : 要过滤掉的单个格式

//===============================================

function eWebEditor_DecodeFilter(html, filter){

switch(filter.toUpperCase()){

case “SCRIPT”:  // 去除所有客户端脚本javascipt,vbscript,jscript,js,vbs,event,…

  html = eWebEditor_execRE(“</?script[^>]*>”, “”, html);

  html = eWebEditor_execRE(“(javascript|jscript|vbscript|vbs):”, “$1：”, html);

  html = eWebEditor_execRE(“on(mouse|exit|error|click|key)”, “<I>on$1</I>”, html);

  html = eWebEditor_execRE(“&#”, “<I>&#</I>”, html);

  break;

case “TABLE”:  // 去除表格<table><tr><td><th>

  html = eWebEditor_execRE(“</?table[^>]*>”, “”, html);

  html = eWebEditor_execRE(“</?tr[^>]*>”, “”, html);

  html = eWebEditor_execRE(“</?th[^>]*>”, “”, html);

  html = eWebEditor_execRE(“</?td[^>]*>”, “”, html);

  break;

case “CLASS”:  // 去除样式类class=””

  html = eWebEditor_execRE(“(<[^>]+) class=[^ |^>]*([^>]*>)”, “$1 $2”, html) ;

  break;

case “STYLE”:  // 去除样式style=””

  html = eWebEditor_execRE(“(<[^>]+) style=\”[^\”]*\”([^>]*>)”, “$1 $2”, html);

  break;

case “XML”:   // 去除XML<?xml>

  html = eWebEditor_execRE(“< \\?xml[^>]*>”, “”, html);

  break;

case “NAMESPACE”: // 去除命名空间<o:p></o:p>

  html = eWebEditor_execRE(“<\/?[a-z]+:[^>]*>”, “”, html);

  break;

case “FONT”:  // 去除字体<font></font>

  html = eWebEditor_execRE(“</?font[^>]*>”, “”, html);

  break;

case “MARQUEE”:  // 去除字幕<marquee></marquee>

  html = eWebEditor_execRE(“</?marquee[^>]*>”, “”, html);

  break;

case “OBJECT”:  // 去除对象<object><param><embed></object>

  html = eWebEditor_execRE(“</?object[^>]*>”, “”, html);

  html = eWebEditor_execRE(“</?param[^>]*>”, “”, html);

  html = eWebEditor_execRE(“</?embed[^>]*>”, “”, html);

  break;

default:

}

return html;

}

// ============================================

// 执行正则表达式替换

// ============================================

function eWebEditor_execRE(re, rp, content) {

oReg = new RegExp(re, “ig”);

r = content.replace(oReg, rp);

return r;

}

</Script>

发布者：全栈程序员-站长，转载请注明出处：https://javaforall.net/111124.html原文链接：https://javaforall.net