Add missing HTML attributes to whitelist

Browse Source
This commit is contained in:
BordedDev 2025-06-19 09:30:33 +02:00
parent c53b930554
commit b9a142ba48
No known key found for this signature in database
GPG Key ID: C5F495EAE56673BF
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/snek/system/template.py
View File

@ -151,6 +151,15 @@ SAFE_ATTRIBUTES = {
"aria-hidden",
"aria-label",
"srcset",
"target",
"rel",
"referrerpolicy",
"controls",
"frameborder",
"allow",
"allowfullscreen",
"title",
"referrerpolicy",
}
@ -447,7 +456,7 @@ def embed_url(text):
description_element.append(
BeautifulSoup(
f"<p class='page-description'>{page_description or "No description available."}</p>",
f"<p class='page-description'>{page_description or 'No description available.'}</p>",
"html.parser",
)
)