vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

feat(html_utils): introduce wildcard in sanitize_html

Browse source 
Introduces a wildcard i.e. Disallows all HTML tags when used.
This commit is contained in:
AarDG10 2026-04-13 17:28:57 +05:30
parent 2ac1998000
commit c3d8214124
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
frappe/utils/html_utils.py
View file

@ -170,7 +170,10 @@ def sanitize_html(html, linkify=False, always_sanitize=False, disallowed_tags=No
# Allow caller to explicitly disallow some tags
if disallowed_tags:
tags.difference_update(disallowed_tags)
if disallowed_tags == "*":
tags = set()
else:
tags.difference_update(disallowed_tags)
attributes = {"*": acceptable_attributes, "svg": svg_attributes}