patch for sanitizer allowed tags, thanks Alan
This commit is contained in:
@@ -1 +1 @@
|
||||
Version 2.4.1-alpha.2+timestamp.2013.02.21.09.44.37
|
||||
Version 2.4.1-alpha.2+timestamp.2013.02.21.09.57.59
|
||||
|
||||
+2
-1
@@ -211,7 +211,7 @@ def sanitize(text, permitted_tags=[
|
||||
'pre',
|
||||
'img/',
|
||||
'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
|
||||
'table', 'tr', 'td', 'div',
|
||||
'table', 'tbody', 'thead', 'tfoot', 'tr', 'td', 'div',
|
||||
'strong', 'span',
|
||||
],
|
||||
allowed_attributes={
|
||||
@@ -225,3 +225,4 @@ def sanitize(text, permitted_tags=[
|
||||
return str(text)
|
||||
return XssCleaner(permitted_tags=permitted_tags,
|
||||
allowed_attributes=allowed_attributes).strip(text, escape)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user