aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-17 14:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Allow comments in HTML (#1555)

Browse Source 
* Re-allow HTML comments in sanitized HTML
This commit is contained in:
Kevin Chung
2020-07-19 21:07:20 -04:00
committed by GitHub
parent 9a2f46e182
commit 559306ee4f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
CTFd/utils/security/sanitize.py
View File

@@ -5,6 +5,7 @@ from lxml.html.clean import Cleaner # nosec B410
from lxml.html.defs import safe_attrs # nosec B410
cleaner = Cleaner(
comments=False,
page_structure=False,
embedded=False,
frames=False,