django-nh3 icon indicating copy to clipboard operation
django-nh3 copied to clipboard

Support for BLEACH_ALLOWED_STYLES and BLEACH_ALLOWED_PROTOCOLS

Open Arushi2012 opened this issue 1 year ago • 3 comments

@marksweb Is there any plan to support these?

Arushi2012 avatar Aug 12 '24 21:08 Arushi2012

@Arushi2012 From what I recall of the nh3 docs, these settings don't seem to match up to NH3

marksweb avatar Aug 13 '24 00:08 marksweb

Allowed protocols should be supported by NH3's url_schemes option now.

However, since neither the (Rust) Ammonia project or the (Python) NH3 project supports an allowlist for styles this project does not either.

I have added support for url_schemes in PR #54. We will have to wait for the Ammonia project and then the NH3 project to support style allowlists.

blag avatar May 21 '25 06:05 blag

PR #54 was subsumed by PR #57, which was merged. So we now support specifying url_schemes - this is partially done.

Still awaiting the Ammonia project and subsequently Python's NH3 project to implement an allowlist for styles.

blag avatar Jul 25 '25 23:07 blag