diff --git a/frappe/utils/html_utils.py b/frappe/utils/html_utils.py index 24def07c63..ccb374fbcc 100644 --- a/frappe/utils/html_utils.py +++ b/frappe/utils/html_utils.py @@ -1,8 +1,10 @@ - -import frappe import json import re -import bleach_whitelist.bleach_whitelist as bleach_whitelist + +from bleach_allowlist import bleach_allowlist + +import frappe + def clean_html(html): import bleach @@ -71,7 +73,7 @@ def sanitize_html(html, linkify=False): tags = (acceptable_elements + svg_elements + mathml_elements + ["html", "head", "meta", "link", "body", "style", "o:p"]) attributes = {"*": acceptable_attributes, 'svg': svg_attributes} - styles = bleach_whitelist.all_styles + styles = bleach_allowlist.all_styles strip_comments = False # returns html with escaped tags, escaped orphan >, <, etc. diff --git a/requirements.txt b/requirements.txt index 769d8c3e7b..b3bfc12567 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ Babel~=2.9.0 beautifulsoup4~=4.9.3 -bleach-whitelist~=0.0.11 +bleach-allowlist~=1.0.3 bleach~=3.3.0 boto3~=1.17.53 braintree~=4.8.0