fix(sanitize-html): allow all data-* attrs

This commit is contained in:
Faris Ansari 2022-08-08 18:36:54 +05:30
parent 2101a2d576
commit cafd2c920d

View file

@ -162,7 +162,13 @@ def sanitize_html(html, linkify=False):
+ mathml_elements
+ ["html", "head", "meta", "link", "body", "style", "o:p"]
)
attributes = {"*": acceptable_attributes, "svg": svg_attributes}
def attributes_filter(tag, name, value):
if name.startswith("data-"):
return True
return name in acceptable_attributes
attributes = {"*": attributes_filter, "svg": svg_attributes}
styles = bleach_allowlist.all_styles
strip_comments = False