OpenSlides/openslides/utils/validate.py

35 lines
987 B
Python
Raw Normal View History

2017-01-20 11:34:05 +01:00
import bleach
allowed_tags = [
'a', 'img', # links and images
'p', 'span', 'blockquote', # text layout
'strike', 'strong', 'u', 'em', 'sup', 'sub', 'pre', # text formatting
'h1', 'h2', 'h3', 'h4', 'h5', 'h6', # headings
'ol', 'ul', 'li', # lists
'table', 'caption', 'thead', 'tbody', 'th', 'tr', 'td', # tables
]
allowed_attributes = {
'*': ['class', 'style'],
'img': ['alt', 'src', 'title'],
'a': ['href', 'title'],
'th': ['scope'],
}
allowed_styles = [
'color', 'background-color', 'height', 'width', 'text-align'
]
def validate_html(html):
"""
This method takes a string and escapes all non-whitelisted html entries.
Every field of a model that is loaded trusted in the DOM should be validated.
"""
if isinstance(html, str):
return bleach.clean(
html,
tags=allowed_tags,
attributes=allowed_attributes,
styles=allowed_styles)
else:
return html