dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

patch for sanitizer allowed tags, thanks Alan

Browse Source
This commit is contained in:
Massimo
2013-02-21 09:58:28 -06:00
parent 8961060461
commit 58c32f5a05
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
VERSION
+1 -1
View File
@@ -1 +1 @@
Version 2.4.1-alpha.2+timestamp.2013.02.21.09.44.37 Version 2.4.1-alpha.2+timestamp.2013.02.21.09.57.59
gluon/sanitizer.py
+2 -1
View File
@@ -211,7 +211,7 @@ def sanitize(text, permitted_tags=[
'pre', 'pre',
'img/', 'img/',
'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
'table', 'tr', 'td', 'div', 'table', 'tbody', 'thead', 'tfoot', 'tr', 'td', 'div',
'strong', 'span', 'strong', 'span',
], ],
allowed_attributes={ allowed_attributes={
@@ -225,3 +225,4 @@ def sanitize(text, permitted_tags=[
return str(text) return str(text)
return XssCleaner(permitted_tags=permitted_tags, return XssCleaner(permitted_tags=permitted_tags,
allowed_attributes=allowed_attributes).strip(text, escape) allowed_attributes=allowed_attributes).strip(text, escape)