mozilla/bleach
View on GitHub ↗ ★ 2,762 Python archived
Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2016-05-04 · latest 2022-09-07
20082026
-
…data. You should never use `safe` on user data unless you use something like bleach ( https://github.com/mozilla/bleach ) to sanitize the data. Even then, you should use caution.
comment by brento · 2022-09-07 · in Serialize Django Data for JavaScript -
of this matter I really like https://github.com/mozilla/bleach . is your project any different aside from the "service oriented" nature? (also I don't see any usage method, if not from the browser)
comment by burnbabyburn · 2017-04-26 · in Show HN: HtmlWasher – An HTML cleanup tool -
…tags+attributes, and validating all xlink:href's in the SVG-XML, using a library like bleach ( https://github.com/mozilla/bleach ) before passing to ImageMagick. Probably not a bad thing to be doing anyway.
comment by rbut · 2016-05-04 · in Remote code execution vulnerability in ImageMagick