HTML sanitize: allow controlling of allowed styles

2015-07-10 09:06:23 +02:00 · 2015-07-10 09:06:23 +02:00 · 190fae3b9a
commit 190fae3b9a
parent a477c59908
1 changed files with 2 additions and 2 deletions
--- a/util/html.py
+++ b/util/html.py
@ -70,11 +70,11 @@ def sanitizeStyle(value, validStyles=validStyles):
            parts = item.split(':')
            if len(parts) == 2:
                k, v = parts
-                if checkStyle(k):
+                if checkStyle(k, validStyles):
                    result.append(item.strip())
    return '; '.join(result)

-def checkStyle(k):
+def checkStyle(k, validStyles=validStyles):
    k = k.strip().lower()
    if k in validStyles:
        return True