HTML validation

[Ivan Demkovitch]

Hi!

I have news pages on my websites where certain users could post their stuff.
They allowed(and asked) to use html tags, because I save text as-is in
database and then just pull it out to the page.

I wanted to know if there any built-in stuff in .NET to validate HTM text to
make sure tags closed, valid tags used, etc.

Thanks,
Ivan
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Ken Cox [Microsoft MVP]]

Hi Ivan,

You might want to check whether you can take advantage of the API for HTML
Tidy. There's a lot of activity going on here:

http://tidy.sourceforge.net/

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:ef**************@tk2msftngp13.phx.gbl...

Hi!

I have news pages on my websites where certain users could post their
stuff.
They allowed(and asked) to use html tags, because I save text as-is in
database and then just pull it out to the page.

I wanted to know if there any built-in stuff in .NET to validate HTM text
to
make sure tags closed, valid tags used, etc.

Thanks,
Ivan
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Scott M.]

There is the MSHTML parser. But be advised that the 1.1 .NET Framework has
a cross-site scripting component built in to prevent tag-like data from
being submitted from form posts. The feature can be disabled in web.comfig,
but your web host may not allow it.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:ef**************@tk2msftngp13.phx.gbl...

Hi!

I have news pages on my websites where certain users could post their stuff. They allowed(and asked) to use html tags, because I save text as-is in
database and then just pull it out to the page.

I wanted to know if there any built-in stuff in .NET to validate HTM text to make sure tags closed, valid tags used, etc.

Thanks,
Ivan
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Ivan Demkovitch]

Scott,

Thanks! Good to know that something is there

I'm aware of 1.1 .NET security feature because my host uses 1.1 and my
development machine has 1.0 (you know what I mean :-) )

I'm disabling this at page level.

Can you give me a link on how to use MSHTML parser or anything related?

Thanks,
Ivan

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:eq**************@TK2MSFTNGP12.phx.gbl...

There is the MSHTML parser. But be advised that the 1.1 .NET Framework has a cross-site scripting component built in to prevent tag-like data from
being submitted from form posts. The feature can be disabled in web.comfig, but your web host may not allow it.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:ef**************@tk2msftngp13.phx.gbl...

Hi!

I have news pages on my websites where certain users could post their stuff.

They allowed(and asked) to use html tags, because I save text as-is in
database and then just pull it out to the page.

I wanted to know if there any built-in stuff in .NET to validate HTM

text to

make sure tags closed, valid tags used, etc.

Thanks,
Ivan
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Scott M.]

This may help:

http://msdn.microsoft.com/library/de...ng/hosting.asp

Also, do a newsgroup search on mshtml, I just recently saw a post where
someone was using it.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:%2******************@TK2MSFTNGP09.phx.gbl...

Scott,

Thanks! Good to know that something is there

I'm aware of 1.1 .NET security feature because my host uses 1.1 and my
development machine has 1.0 (you know what I mean :-) )

I'm disabling this at page level.

Can you give me a link on how to use MSHTML parser or anything related?

Thanks,
Ivan

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:eq**************@TK2MSFTNGP12.phx.gbl...

There is the MSHTML parser. But be advised that the 1.1 .NET Framework

has

a cross-site scripting component built in to prevent tag-like data from
being submitted from form posts. The feature can be disabled in

web.comfig,

but your web host may not allow it.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:ef**************@tk2msftngp13.phx.gbl...

Hi!

I have news pages on my websites where certain users could post their

stuff.

They allowed(and asked) to use html tags, because I save text as-is in
database and then just pull it out to the page.

I wanted to know if there any built-in stuff in .NET to validate HTM

text

to

make sure tags closed, valid tags used, etc.

Thanks,
Ivan
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Shahar]

you can let your users use some HTML-editor that you can find in the web.

[Scott M.]

How would that help him validate the HTML (using .NET) that they send to
him?
"Shahar" <sh****@log-on.com> wrote in message
news:e8**************************@posting.google.c om...

you can let your users use some HTML-editor that you can find in the web.

[Ivan Demkovitch]

Yep... You correct here..

I did research and it seems like Microsoft.mshtml
comes with VS only.Currently I use WebMatrix for development...

Another problem is I'm not sure how would I redistribute this ? I use public
webhost...

May be I will need to go with WYSIWYG web-based editor, but I hate to see
html this things generate.
And I didn't find free ones...

May be just allow specific set of tags and validate them myself?!

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:#Y**************@TK2MSFTNGP10.phx.gbl...

How would that help him validate the HTML (using .NET) that they send to
him?
"Shahar" <sh****@log-on.com> wrote in message
news:e8**************************@posting.google.c om...

you can let your users use some HTML-editor that you can find in the

web.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Eric Lawrence [MSFT]]

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your server
in response to user requests as it's pretty resource heavy.

You may find this interesting:
http://msdn.microsoft.com/downloads/...ns/default.asp
--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...

Yep... You correct here..

I did research and it seems like Microsoft.mshtml
comes with VS only.Currently I use WebMatrix for development...

Another problem is I'm not sure how would I redistribute this ? I use public webhost...

May be I will need to go with WYSIWYG web-based editor, but I hate to see
html this things generate.
And I didn't find free ones...

May be just allow specific set of tags and validate them myself?!

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:#Y**************@TK2MSFTNGP10.phx.gbl...

How would that help him validate the HTML (using .NET) that they send to
him?
"Shahar" <sh****@log-on.com> wrote in message
news:e8**************************@posting.google.c om...

you can let your users use some HTML-editor that you can find in the

web.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Ivan Demkovitch]

I was talking about Microsoft.mshtml
which is (I beleive) part of VS.NEt and it's not going to be on a web
server?

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your server in response to user requests as it's pretty resource heavy.

You may find this interesting:
http://msdn.microsoft.com/downloads/...sp?url=/downlo
ads/samples/internet/ie55/EditRegions/default.asp

--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...

Yep... You correct here..

I did research and it seems like Microsoft.mshtml
comes with VS only.Currently I use WebMatrix for development...

Another problem is I'm not sure how would I redistribute this ? I use

public

webhost...

May be I will need to go with WYSIWYG web-based editor, but I hate to see html this things generate.
And I didn't find free ones...

May be just allow specific set of tags and validate them myself?!

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:#Y**************@TK2MSFTNGP10.phx.gbl...

How would that help him validate the HTML (using .NET) that they send to him?
"Shahar" <sh****@log-on.com> wrote in message
news:e8**************************@posting.google.c om...
> you can let your users use some HTML-editor that you can find in the

web.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Scott M.]

Ivan,

VS.NET doesn't provide any native classes, it only makes the classes in the
..NET Framework available in an editing environment. Whatever the .NET
Framework has to offer VS.NET will be available to Web Matrix as well.

But Eric is correct MSHTML is not a .NET Framework class, it is part of IE,
but can be instantiated from a .NET Project.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:uL**************@TK2MSFTNGP12.phx.gbl...

I was talking about Microsoft.mshtml
which is (I beleive) part of VS.NEt and it's not going to be on a web
server?

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your server

in response to user requests as it's pretty resource heavy.

You may find this interesting:

http://msdn.microsoft.com/downloads/...sp?url=/downlo ads/samples/internet/ie55/EditRegions/default.asp

--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...

Yep... You correct here..

I did research and it seems like Microsoft.mshtml
comes with VS only.Currently I use WebMatrix for development...

Another problem is I'm not sure how would I redistribute this ? I use

public

webhost...

May be I will need to go with WYSIWYG web-based editor, but I hate to see html this things generate.
And I didn't find free ones...

May be just allow specific set of tags and validate them myself?!

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:#Y**************@TK2MSFTNGP10.phx.gbl...
> How would that help him validate the HTML (using .NET) that they send to

> him?
>
>
> "Shahar" <sh****@log-on.com> wrote in message
> news:e8**************************@posting.google.c om...
> > you can let your users use some HTML-editor that you can find in

the web.
>
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Eric Lawrence [MSFT]]

I don't believe you can successfully instantiate MSHTML on the user's
client, although if you set the ContentEditable flag on a DIV, I believe the
net result is pretty much the same. How were you planning to use MSHTML to
verify the content?
--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:uL**************@TK2MSFTNGP12.phx.gbl...

I was talking about Microsoft.mshtml
which is (I beleive) part of VS.NEt and it's not going to be on a web
server?

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your server

in response to user requests as it's pretty resource heavy.

You may find this interesting:

http://msdn.microsoft.com/downloads/...sp?url=/downlo ads/samples/internet/ie55/EditRegions/default.asp

--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...

Yep... You correct here..

I did research and it seems like Microsoft.mshtml
comes with VS only.Currently I use WebMatrix for development...

Another problem is I'm not sure how would I redistribute this ? I use

public

webhost...

May be I will need to go with WYSIWYG web-based editor, but I hate to see html this things generate.
And I didn't find free ones...

May be just allow specific set of tags and validate them myself?!

"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:#Y**************@TK2MSFTNGP10.phx.gbl...
> How would that help him validate the HTML (using .NET) that they send to

> him?
>
>
> "Shahar" <sh****@log-on.com> wrote in message
> news:e8**************************@posting.google.c om...
> > you can let your users use some HTML-editor that you can find in

the web.
>
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Ivan Demkovitch]

I don't know...

If you can suggest better way to validate content - cool.

I'm seriously thinking about writing my own little class to do this.
I only want them to do simple stuff like <i><b><u><p>...
I don't know how I would use mshtml because I didn't use it yet...

I'm just researching on the subject.

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:u#**************@TK2MSFTNGP11.phx.gbl...

I don't believe you can successfully instantiate MSHTML on the user's
client, although if you set the ContentEditable flag on a DIV, I believe the net result is pretty much the same. How were you planning to use MSHTML to verify the content?
--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no rights.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:uL**************@TK2MSFTNGP12.phx.gbl...

I was talking about Microsoft.mshtml
which is (I beleive) part of VS.NEt and it's not going to be on a web
server?

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your

server

in response to user requests as it's pretty resource heavy.

You may find this interesting:

http://msdn.microsoft.com/downloads/...sp?url=/downlo

ads/samples/internet/ie55/EditRegions/default.asp

--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no

rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...
> Yep... You correct here..
>
> I did research and it seems like Microsoft.mshtml
> comes with VS only.Currently I use WebMatrix for development...
>
> Another problem is I'm not sure how would I redistribute this ? I use public
> webhost...
>
> May be I will need to go with WYSIWYG web-based editor, but I hate

to

see

> html this things generate.
> And I didn't find free ones...
>
> May be just allow specific set of tags and validate them myself?!
>
>
>
>
>
> "Scott M." <s-***@BADSPAMsnet.net> wrote in message
> news:#Y**************@TK2MSFTNGP10.phx.gbl...
> > How would that help him validate the HTML (using .NET) that they

send

to

> > him?
> >
> >
> > "Shahar" <sh****@log-on.com> wrote in message
> > news:e8**************************@posting.google.c om...
> > > you can let your users use some HTML-editor that you can find in

the > web.
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004
>
>

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

[Ivan Demkovitch]

Somewhere in csharp group I googled info on the subject.

Microsoft.mshtml is a wrapper around mshtml. It is installed into GAC and I
suspect would be
the best way to go. (Better then COM interop)

But this is not a part of .NET Framework, therefore I can not use it from
command line/webmatrix...
"Scott M." <s-***@BADSPAMsnet.net> wrote in message
news:e3**************@TK2MSFTNGP10.phx.gbl...

Ivan,

VS.NET doesn't provide any native classes, it only makes the classes in the .NET Framework available in an editing environment. Whatever the .NET
Framework has to offer VS.NET will be available to Web Matrix as well.

But Eric is correct MSHTML is not a .NET Framework class, it is part of IE, but can be instantiated from a .NET Project.
"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:uL**************@TK2MSFTNGP12.phx.gbl...

I was talking about Microsoft.mshtml
which is (I beleive) part of VS.NEt and it's not going to be on a web
server?

"Eric Lawrence [MSFT]" <e_********@hotmail.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

MSHTML is a platform .DLL and ships as a part of Internet Explorer.
However, you probably don't want to instantiate this control on your

server

in response to user requests as it's pretty resource heavy.

You may find this interesting:

http://msdn.microsoft.com/downloads/...sp?url=/downlo

ads/samples/internet/ie55/EditRegions/default.asp

--
Thanks,

Eric Lawrence
Program Manager
Assistance and Worldwide Services

This posting is provided "AS IS" with no warranties, and confers no

rights.

"Ivan Demkovitch" <id*********@nospam.hotmail.com> wrote in message
news:u8**************@tk2msftngp13.phx.gbl...
> Yep... You correct here..
>
> I did research and it seems like Microsoft.mshtml
> comes with VS only.Currently I use WebMatrix for development...
>
> Another problem is I'm not sure how would I redistribute this ? I use public
> webhost...
>
> May be I will need to go with WYSIWYG web-based editor, but I hate

to

see

> html this things generate.
> And I didn't find free ones...
>
> May be just allow specific set of tags and validate them myself?!
>
>
>
>
>
> "Scott M." <s-***@BADSPAMsnet.net> wrote in message
> news:#Y**************@TK2MSFTNGP10.phx.gbl...
> > How would that help him validate the HTML (using .NET) that they

send

to

> > him?
> >
> >
> > "Shahar" <sh****@log-on.com> wrote in message
> > news:e8**************************@posting.google.c om...
> > > you can let your users use some HTML-editor that you can find in

the > web.
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004
>
>

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.580 / Virus Database: 367 - Release Date: 2/6/2004