we trusted the user too much

This commit is contained in:
Nyx 2025-03-23 00:41:45 -05:00
parent 6a76dc71bf
commit 1c13258ac0

View file

@ -5,7 +5,7 @@ import generate
def sanitize_html(html):
# Allow only a limited set of tags and attributes
allowed_tags = ['a', 'b', 'i', 'em', 'strong']
allowed_tags = []
allowed_attributes = {'a': ['href']}
return bleach.clean(html, tags=allowed_tags, attributes=allowed_attributes)