MAde elements forbidden.

Browse Source
This commit is contained in:
retoor 2025-06-06 03:28:05 +02:00
parent 1c71c0016b
commit ef75cb3341
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/snek/system/template.py
View File

@ -131,8 +131,9 @@ def whitelist_attributes(html):
for tag in soup.find_all(): for tag in soup.find_all():
if hasattr(tag, 'attrs'): if hasattr(tag, 'attrs'):
if tag.name == 'script': if tag.name in ['script','form','input']:
tag.replace_with('') tag.replace_with('')
continue
attrs = dict(tag.attrs) attrs = dict(tag.attrs)
for attr in list(attrs): for attr in list(attrs):
# Check if attribute is in the safe list or is a data-* attribute # Check if attribute is in the safe list or is a data-* attribute