From 24584d1cab6b49093527d3241a51105643f3d014 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Feb 16 2016 10:50:05 +0000 Subject: Let's consider the h4, h5 and h6 HTML tags safe --- diff --git a/pagure/lib/__init__.py b/pagure/lib/__init__.py index e3cbb42..d81aa9f 100644 --- a/pagure/lib/__init__.py +++ b/pagure/lib/__init__.py @@ -2559,7 +2559,8 @@ def clean_input(text, ignore=None): attrs['img'] = filter_img_src tags = bleach.ALLOWED_TAGS + [ - 'p', 'br', 'div', 'h1', 'h2', 'h3', 'table', 'td', 'tr', 'th', + 'p', 'br', 'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', + 'table', 'td', 'tr', 'th', 'col', 'tbody', 'pre', 'img', 'hr', 'dl', 'dt', 'dd', 'span', ] if ignore: