Darren/dpaste
1
0
Fork 0
mirror of https://github.com/DarrenOfficial/dpaste.git synced 2024-11-23 11:56:36 +11:00
Code Issues Projects Releases Packages Wiki Activity

Do not allow custom HTML in Markdown.

Browse source
This commit is contained in:
Martin Mahner 2018-04-05 21:22:47 +02:00
parent 76e8ddf3ea
commit 46fbe577c5
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
dpaste/highlight.py
View file

@ -67,13 +67,15 @@ class PlainTextHighlighter(Highlighter):
class MarkdownHighlighter(PlainTextHighlighter):
"""Markdown"""
extensions = ('tables', 'fenced-code', 'footnotes', 'autolink,',
'strikethrough', 'underline', 'quote', 'superscript',
'math')
render_flags = ('skip-html',)
def highlight(self, code_string, lexer_name=None):
import misaka
extensions = ('tables', 'fenced-code', 'footnotes', 'autolink,',
'strikethrough', 'underline', 'quote', 'superscript',
'math')
return mark_safe(misaka.html(code_string, extensions=extensions))
return mark_safe(misaka.html(code_string, extensions=self.extensions,
render_flags=self.render_flags))
# -----------------------------------------------------------------------------