jsoup
Jsoup is a Java library that allows to work with real-world HTML and XML data. WHATWG implements the HTML5 specification and allows to parse, process and format HTML documents using DOM API, CSS and XPath selectors.
jsoup
100jhy · Web Scraping & Automation
Common commercial products in this category: Bright Data, Apify, ScrapingBee
- URL, pull and parse HTML data from file or string
- Use DOM transitions or CSS selectors to find and extract data
- Clear user-sent content with a secure list and prevent XSS attacks
- • NeutralHacker News
Jsoup Bug Bust: Unexpected Exceptions Could Lead to Denial of Service
“Applications that use jsoup to parse user-supplied HTML or XML inputs may be vulnerable to DoS attacks. Fuzz tests conducted with the JVM fuzzer "Jazzer", through OSS-Fuzz, uncovered 8 critical bugs and 11 further vulnerabilities.”
- • NeutralHacker News
CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5]
“Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions”