From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from out.smtp-auth.no-ip.com (smtp-auth.no-ip.com [8.23.224.61]) by hurricane.the-brannons.com (Postfix) with ESMTPS id 03BCE779BE for ; Thu, 13 Aug 2015 17:51:00 -0700 (PDT) X-No-IP: carhart.net@noip-smtp X-Report-Spam-To: abuse@no-ip.com Received: from carhart.net (unknown [99.52.200.227]) (Authenticated sender: carhart.net@noip-smtp) by smtp-auth.no-ip.com (Postfix) with ESMTPA id 798DD400E21 for ; Thu, 13 Aug 2015 17:54:33 -0700 (PDT) Received: from carhart.net (localhost [127.0.0.1]) by carhart.net (8.13.8/8.13.8) with ESMTP id t7E0sWKI016251 for ; Thu, 13 Aug 2015 17:54:32 -0700 Received: from localhost (kevin@localhost) by carhart.net (8.13.8/8.13.8/Submit) with ESMTP id t7E0sWgh016248 for ; Thu, 13 Aug 2015 17:54:32 -0700 Date: Thu, 13 Aug 2015 17:54:32 -0700 (PDT) From: Kevin Carhart To: Edbrowse-dev@lists.the-brannons.com In-Reply-To: <20150813200725.GE993@toaster.adamthompson.me.uk> Message-ID: References: <20150712165646.eklhad@comcast.net> <87614k6lmq.fsf@mushroom.localdomain> <20150813200725.GE993@toaster.adamthompson.me.uk> User-Agent: Alpine 2.03 (LRH 1266 2009-07-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Subject: Re: [Edbrowse-dev] tidy5 X-BeenThere: edbrowse-dev@lists.the-brannons.com X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Edbrowse Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Aug 2015 00:51:00 -0000 > I know I said I'd look into a new js engine, > but I really think we need to get the html and DOM stuff sorted before that. > > In terms of an architecture I'm thinking of aiming to have the DOM as an > abstraction which can be used by both the rendering code and the js. Thus: Thanks Adam! Exciting. OK, so far I compiled the tidy code and ran their sample program with libtidy calls. The possibility of interoperability is very cool. Am I on the right track in thinking, well tidy has a central "switch-case" section over various tag types, and we have a central "switch-case" in encodeTags, so this would be the place where you bring in tidy calls? For methodology of how to proceed, I am happy with any & all methods. I don't write C professionally but I know some parts of the edbrowse source pretty well at this point. At least I'm now on a first-name basis with encodeTags. (javaParseExecute and I used to babysit each others' children.) > As for Edbrowse being used in cyber security, > this isn't a good idea since most systems which analyse web pages for threats > use highly advanced techniques to scan for malware which don't involve > executing the javascript directly, and any such execution would probably > require analysis on the js engine level to detect suspicious behaviours. Ahhhh, I see. That makes sense. Kevin -------- Kevin Carhart * 415 225 5306 * The Ten Ninety Nihilists