From 84359c8d4951b5007de816ced98f35c324893c9b Mon Sep 17 00:00:00 2001 From: Sagar Vora <16315650+sagarvora@users.noreply.github.com> Date: Fri, 23 Jan 2026 14:48:10 +0530 Subject: [PATCH] chore: improve misleading docstring --- frappe/utils/html_utils.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/frappe/utils/html_utils.py b/frappe/utils/html_utils.py index b440e42c32..e53983f3dc 100644 --- a/frappe/utils/html_utils.py +++ b/frappe/utils/html_utils.py @@ -136,8 +136,7 @@ def clean_script_and_style(html): def sanitize_html(html, linkify=False, always_sanitize=False): """ Sanitize HTML tags, attributes and style to prevent XSS attacks - Based on nh3 clean (formerly bleach clean), bleach whitelist and html5lib's - Sanitizer defaults + Based on nh3 clean, bleach whitelist and html5lib's Sanitizer defaults Does not sanitize JSON unless explicitly specified, as it could lead to future problems """