CC/octomode
12
0
Fork 0
Code Issues 18 Pull Requests Projects Releases Wiki Activity

escape() and bleach.clean() are disabled... sanitizing does not render the html at all anymore...

Browse Source
This commit is contained in:
manetta 2022-02-22 11:08:14 +01:00
parent d820006525
commit de8027f68a
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
octomode.py
View File

@ -80,7 +80,7 @@ def md_to_html(md_pad_content):
# html = bleach.clean(html) # html = bleach.clean(html)
# Another built-in Flask way to sanitize # Another built-in Flask way to sanitize
html = escape(html) # html = escape(html)
html = Markup(html) html = Markup(html)
return html return html

2
templates/pagedjs.html
View File

@ -15,7 +15,7 @@
</section> </section>
<section id="main"> <section id="main">
<div id="wrapper">{{ pad_content | safe }}</div> <div id="wrapper">{{ pad_content }}</div>
</section> </section>
</body> </body>
</html> </html>

2
templates/preview.html
View File

@ -13,7 +13,7 @@
</section> </section>
<section id="main"> <section id="main">
<div id="wrapper">{{ pad_content | safe }}</div> <div id="wrapper">{{ pad_content }}</div>
</section> </section>
</body> </body>
</html> </html>