Add missing HTML attributes to whitelist

Browse Source
This commit is contained in:
BordedDev 2025-06-19 09:30:33 +02:00
parent c53b930554
commit b9a142ba48
No known key found for this signature in database
GPG Key ID: C5F495EAE56673BF
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/snek/system/template.py
View File

@ -151,6 +151,15 @@ SAFE_ATTRIBUTES = {
"aria-hidden", "aria-hidden",
"aria-label", "aria-label",
"srcset", "srcset",
"target",
"rel",
"referrerpolicy",
"controls",
"frameborder",
"allow",
"allowfullscreen",
"title",
"referrerpolicy",
} }
@ -447,7 +456,7 @@ def embed_url(text):
description_element.append( description_element.append(
BeautifulSoup( BeautifulSoup(
f"<p class='page-description'>{page_description or "No description available."}</p>", f"<p class='page-description'>{page_description or 'No description available.'}</p>",
"html.parser", "html.parser",
) )
) )