**NOTE: Please try to break this and tell me where it is insufficent.**
Allows only whitelisted tags and attributes through.
The setting ALLOWED_TAGS can override the behavior. The syntax of
this setting is a space-separated list of tags, which are optionally
followed by a colon and a comma-separated list of attribute permitted in
the tag.
For example, to allow <a> tags which are links or named anchors, but not
to allow definition of an onclick attribute:
ALLOWED_TAGS = "a:href,name"
In your templates, sanitizing is easy.
{% load sanitizer %}
{{ user_comment|allowtags|safe }}
{{ user_comment|allowtags:"b i"|safe }}
Disallowed tags or attributes are simply removed.
In some cases, it is useful to disallow a tag, but to convert it to something
safe, rather than stripping it entirely. For example, you might not want to
allow <h1> tags, and want to "quiet" them into <h2> tags.
{{ body|maptags:"h1=h2 h2=h3 h4=h5" }}
Allows only whitelisted tags and attributes through.
The setting ALLOWED_TAGS can override the behavior. The syntax of
this setting is a space-separated list of tags, which are optionally
followed by a colon and a comma-separated list of attribute permitted in
the tag.
For example, to allow <a> tags which are links or named anchors, but not
to allow definition of an onclick attribute:
ALLOWED_TAGS = "a:href,name"
In your templates, sanitizing is easy.
{% load sanitizer %}
{{ user_comment|allowtags|safe }}
{{ user_comment|allowtags:"b i"|safe }}
Disallowed tags or attributes are simply removed.
In some cases, it is useful to disallow a tag, but to convert it to something
safe, rather than stripping it entirely. For example, you might not want to
allow <h1> tags, and want to "quiet" them into <h2> tags.
{{ body|maptags:"h1=h2 h2=h3 h4=h5" }}
Release files for django-sanitizer 0.4.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| django-sanitizer-0.4.1.tar.gz | 3.9 kB | Details |
Release files / django-sanitizer-0.4.1.tar.gz
| Download URL | django-sanitizer-0.4.1.tar.gz |
|---|---|
| Size | 3.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
9d6cce3a895d29afa04d818b22713a1b49085dbca97dd109cd6c13365a3b8f98
|
|
BLAKE2b-256 checksum How to use checksums |
9e5219ab50a23ba47cdc6319461cfe0f50fb2cc5800e0186f86b216b31588dbc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |