Incorrect HTML magic identification when preceeded by a comment #102

markedmondson · 2024-04-04T20:44:23Z

If the HTML has a comment before the opening tag, it is incorrectly identified as XML.

Steps to reproduce

io = StringIO.new(<<~HTML)
  <!--/* Throwaway comment but it has to be over 64 characters to fail AND have a uppercase HTML tag */-->
  <HTML>
    <head>
    </head>
    <body>
      <h1>Magic!</h1>
    </body
  </HTML>
HTML
Marcel::MimeType.for(io)
# => "application/xml"

io = StringIO.new(<<~HTML)
  <!--/* Throwaway comment but it has to be over 128 characters to fail AND have a lowercase HTML tag, we can pad this one out a bit to get it longer */-->
  <html>
    <head>
    </head>
    <body>
      <h1>Magic!</h1>
    </body
  </html>
HTML
Marcel::MimeType.for(io)
# => "application/xml"

Updating the magic definitions is a temporary workaround but obviously the comment could be any length, the broader lookup here https://github.com/rails/marcel/blob/main/lib/marcel/tables.rb#L2761 falls below the comment xml matching magic in https://github.com/rails/marcel/blob/main/lib/marcel/tables.rb#L2747.

Temporary workaround

Marcel::MimeType.extend "text/html", magic: [[0..256, "<HTML"]]
Marcel::MimeType.extend "text/html", magic: [[0..256, "<html"]]

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Incorrect HTML magic identification when preceeded by a comment #102

Incorrect HTML magic identification when preceeded by a comment #102

markedmondson commented Apr 4, 2024 •

edited

Loading

Incorrect HTML magic identification when preceeded by a comment #102

Incorrect HTML magic identification when preceeded by a comment #102

Comments

markedmondson commented Apr 4, 2024 • edited Loading

Steps to reproduce

Temporary workaround

markedmondson commented Apr 4, 2024 •

edited

Loading