web.py

HTML sanitization code should allow customization

Bug #117785 reported by Aaron Swartz on 2007-05-30

Affects		Status	Importance	Assigned to	Milestone
	web.py	New	Undecided	Unassigned

The HTML sanitization code from bug 117784 should be improved to allow:

1. customizable .acceptable_elements, .acceptable_attributes,
.acceptable_uri_schemes, etc.

2. per-element attribute blocking

3. distinguishing between whether just an element should be removed or its entire subtree

[This bug reported by Chris Palmer.]

Revision history for this message

Josh Goldfoot (jgfoot) wrote on 2008-08-23:

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Bug watches keep track of this bug in other bug trackers.