diff --git a/files/helpers/bleach_body.py b/files/helpers/bleach_body.py index 7f37f2e25..2f8a3b318 100644 --- a/files/helpers/bleach_body.py +++ b/files/helpers/bleach_body.py @@ -7,7 +7,7 @@ from files.helpers.regex import sanitize_url_regex from files.helpers.config.const import * allowed_tags = ('a','audio','b','big','blink','blockquote','br','center','code','del','details','em','g','gl','h1','h2','h3','h4','h5','h6','hr','i','img','li','lite-youtube','marquee','ol','p','pre','rp','rt','ruby','small','span','spoiler','strike','strong','sub','summary','sup','table','tbody','td','th','thead','tr','u','ul','video') -allowed_tags_runtime = ('div', 'input', 'label', 'score', 'source', 'button', 'd') +allowed_tags_runtime = ('div', 'input', 'label', 'score', 'button', 'd') allowed_css_properties = ('background-color', 'color', 'filter', 'font-weight', 'text-align', 'transform') def allowed_attributes(tag, name, value): @@ -48,9 +48,6 @@ def allowed_attributes(tag, name, value): if name == 'preload' and value == 'none': return True if name == 'src': return is_safe_url(value) - if tag == 'source': - if name == 'src': return is_safe_url(value) - if tag == 'audio': if name == 'src': return is_safe_url(value) if name == 'controls' and value == '': return True