Mercurial > public > sg101
view core/html.py @ 870:ee56c8c8cf98
More WIP on ssl_images management command and tests.
author | Brian Neal <bgneal@gmail.com> |
---|---|
date | Mon, 15 Dec 2014 21:16:47 -0600 |
parents | 928b97ec55a7 |
children | 71a671dab55d 4619290d171d |
line wrap: on
line source
"""Common HTML related functions""" import bleach # Each entry in the _CLEAN_PROFILES dict is a profile name -> 3-tuple pair. The # tuple consists of (allowed_tags_list, allowed_attributes_dict, # allowed_styles_list) # _CLEAN_PROFILES = { 'comments': ( [ 'a', 'b', 'blockquote', 'br', 'code', 'del', 'em', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'hr', 'i', 'img', 'li', 'ol', 'p', 'pre', 'strong', 'ul', ], { 'a': ['href'], 'img': ['src', 'alt', 'title'], }, [], ), 'news': ( [ 'a', 'b', 'blockquote', 'br', 'caption', 'center', 'code', 'col', 'colgroup', 'dd', 'del', 'div', 'dl', 'dt', 'em', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'hr', 'i', 'img', 'ins', 'li', 'ol', 'p', 'pre', 'small', 'strike', 'strong', 'sub', 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'tt', 'u', 'ul', ], { 'a': ['href'], 'img': ['src', 'alt', 'title', 'width', 'height'], }, [], ), } def clean_html(text, profile='comments'): """Cleans HTML of dangerous tags and content.""" text = text.strip() if not text: return text tags, attrs, styles = _CLEAN_PROFILES[profile] return bleach.clean(text, tags=tags, attributes=attrs, styles=styles, strip=True, strip_comments=True)