Mojo::DOM misparses <script> elements (another way) #2015

mauke · 2022-12-08T16:56:26Z

Mojolicious version: 9.30
Perl version: v5.36.0
Operating system: Ubuntu 22.04.1 LTS

Steps to reproduce the behavior

#!/usr/bin/env perl
use v5.12.0;
use warnings;
use Mojo::DOM;

my $dom = Mojo::DOM->new(do { local $/; scalar readline DATA });

say for $dom->find('p')->each;

__DATA__
<!DOCTYPE html>
<h1>Welcome to HTML</h1>
<script>
    console.log('this is a script element and should be executed');
// </script asdf> <p>
    console.log('this is not a script');
    // <span data-wtf="</script>">:-)</span>

Expected behavior

Output similar to:

<p>
    console.log(&#39;this is not a script&#39;);
    // <span data-wtf="&lt;/script&gt;">:-)</span>
</p>

An (implicitly closed) p element exists, so it should be found.

Actual behavior

No output.

The text was updated successfully, but these errors were encountered:

kraih · 2022-12-08T17:09:40Z

I've not looked at the spec yet, but this would probably be the section to check for the correct behavior.

mauke · 2022-12-08T17:25:12Z

The relevant section is this one: https://html.spec.whatwg.org/multipage/parsing.html#script-data-end-tag-name-state

After seeing </ (followed by a letter) in a <script> element, we end up in the "script data end tag name" state. Here we accumulate letters into the name of a temporary tag. On seeing whitespace (space, tab, line feed, form feed), we check that the temporary tag name matches "script"; if so, we stop script parsing (treating the characters found as a script end tag) and continue parsing for attributes.

Now, end tags with attributes are technically an error: https://html.spec.whatwg.org/multipage/parsing.html#parse-error-end-tag-with-attributes
But a forgiving parser will simply ignore them.

kraih added the bug label Dec 8, 2022

kraih added a commit that referenced this issue Dec 10, 2022

Fix multiple <script> parsing issues (closes #2014, #2015)

6f195d8

kraih closed this as completed Dec 10, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Mojo::DOM misparses <script> elements (another way) #2015

Mojo::DOM misparses <script> elements (another way) #2015

mauke commented Dec 8, 2022

kraih commented Dec 8, 2022

mauke commented Dec 8, 2022

Mojo::DOM misparses <script> elements (another way) #2015

Mojo::DOM misparses <script> elements (another way) #2015

Comments

mauke commented Dec 8, 2022

Steps to reproduce the behavior

Expected behavior

Actual behavior

kraih commented Dec 8, 2022

mauke commented Dec 8, 2022