/ 
libwww-perl-5.21
River stage four • 2204 direct dependents • 6286 total dependents
/ HTML::TreeBuilder
Security Advisories (4)
CPANSA-libwww-perl-2017-01 (2017-11-06)

LWP::Protocol::file can open existent file from file:// scheme. However, current version of LWP uses open FILEHANDLE,EXPR and it has ability to execute arbitrary command

CVE-2011-0633 (2011-01-20)

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.

CVE-2010-2253 (2010-07-06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

CPANSA-libwww-perl-2001-01 (2001-03-14)

If LWP::UserAgent::env_proxy is called in a CGI environment, the case-insensitivity when looking for "http_proxy" permits "HTTP_PROXY" to be found, but this can be trivially set by the web client using the "Proxy:" header.

NAME

HTML::TreeBuilder - Parser that builds a HTML syntax tree

SYNOPSIS

$h = new HTML::TreeBuilder;
$h->parse($document);
#...

print $h->as_HTML;  # or any other HTML::Element method

DESCRIPTION

This is a parser that builds (and actually itself is) a HTML syntax tree.

Objects of this class inherit the methods of both HTML::Parser and HTML::Element. After parsing has taken place it can be regarded as the syntax tree itself.

The following method all control how parsing takes place. You can set the attributes by passing a TRUE or FALSE value as argument.

$p->implicit_tags

Setting this attribute to true will instruct the parser to try to deduce implicit elements and implicit end tags. If it is false you get a parse tree that just reflects the text as it stands. Might be useful for quick & dirty parsing. Default is true.

Implicit elements have the implicit() attribute set.

$p->ignore_unknown

This attribute controls whether unknown tags should be represented as elements in the parse tree. Default is true.

$p->ignore_text

Do not represent the text content of elements. This saves space if all you want is to examine the structure of the document. Default is false.

$p->warn

Call warn() with an appropriate message for syntax errors. Default is false.

SEE ALSO

HTML::Parser, HTML::Element

COPYRIGHT

Copyright 1995-1996 Gisle Aas. All rights reserved.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

AUTHOR

Gisle Aas <aas@sn.no>