escape() and bleach.clean() are disabled... sanitizing does not render the html at all anymore...
This commit is contained in:
parent
d820006525
commit
de8027f68a
@ -80,7 +80,7 @@ def md_to_html(md_pad_content):
|
||||
# html = bleach.clean(html)
|
||||
|
||||
# Another built-in Flask way to sanitize
|
||||
html = escape(html)
|
||||
# html = escape(html)
|
||||
html = Markup(html)
|
||||
|
||||
return html
|
||||
|
@ -15,7 +15,7 @@
|
||||
</section>
|
||||
|
||||
<section id="main">
|
||||
<div id="wrapper">{{ pad_content | safe }}</div>
|
||||
<div id="wrapper">{{ pad_content }}</div>
|
||||
</section>
|
||||
</body>
|
||||
</html>
|
||||
|
@ -13,7 +13,7 @@
|
||||
</section>
|
||||
|
||||
<section id="main">
|
||||
<div id="wrapper">{{ pad_content | safe }}</div>
|
||||
<div id="wrapper">{{ pad_content }}</div>
|
||||
</section>
|
||||
</body>
|
||||
</html>
|
||||
|
Loading…
Reference in New Issue
Block a user