We noticed that YQL module removes src value of html img tag starting with // (ex : //domain.com/image.jpg instead of http://domain.com/image.jpg), while YQL console output is correct.
Pipe example with YQL module :
YQL console with same request
Now look closely to output and check an item in results. Inside an item you'll find a description key with a html value. Inside the html value, look for the first img tag.
In Pipes version, the tag doesn't have a src property, while in YQL console version the src property is present with a correct value.
Thx in advance for any answers.
True, Pipes does strip the src attribute.
Pipes has more filtering and sanitization of feeds due to security reasons. There are malicious feeds that exploit users on vulnerabilities found in src attributes and others.
Hi Paul and thanks for your answer.
This is not entirely true… Yahoo pipes YQL module strips the src attribute only when it considers that it's malformed.
Here's an exemple with a RSS feed (yahoo news) where YQL module doesn't strip the src attribute : http://pipes.yahoo.com/pipes/pipe.info?_id=ac0bd1d073d82acc8b240d9cc8c9c903
(check description values in results)
So, to me it's a bug in YQL module feed filtering because and url staring with // is not malformed, it's part of the RFC.
Please see those post on StackOverflow :