carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

fdfd

master
Aevann1 2021-11-07 22:57:02 +02:00
parent 616b039735
commit 3c881cd358
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
files/helpers/sanitize.py
View File

@ -75,7 +75,19 @@ no_images = ['b',
'span',
]
allowed_attributes = {'*': ['href', 'style', 'src', 'class', 'title', 'rel', 'data-bs-original-name', 'direction', 'behavior', 'scrollamount']}
def sanitize_marquee(tag, name, value):
if name in allowed_attributes['*'] or name in ['direction', 'behavior', 'scrollamount']: return True
if name in ['width', 'height']:
try: value = int(value)
except: return False
if 0 < value <= 200: return True
return False
allowed_attributes = {
'*': ['href', 'style', 'src', 'class', 'title', 'rel', 'data-bs-original-name'],
'marquee': sanitize_marquee}
allowed_protocols = ['http', 'https']