Added: [untested] low trust html sanitizer (#341)

signebedi · Sep 17, 2024 · c4d9b2b · c4d9b2b
1 parent 62bc6bd
commit c4d9b2b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/libreforms_fastapi/utils/docs.py b/libreforms_fastapi/utils/docs.py
@@ -25,6 +25,7 @@
 
 sanitizer = Sanitizer(sanitizer_config)
 
+low_trust_sanitizer = Sanitizer()
 
 class UnsafeHtmlContentError(Exception):
     """Custom exception for unsafe HTML content."""

diff --git a/libreforms_fastapi/utils/document_database.py b/libreforms_fastapi/utils/document_database.py
@@ -23,8 +23,8 @@
 # This import is used to afix digital signatures to records
 from libreforms_fastapi.utils.certificates import sign_record, verify_record_signature
 
-# This import is used to sanitize data on writes
-from libreforms_fastapi.utils.docs import sanitizer
+# This import is used to sanitize data
+from libreforms_fastapi.utils.docs import low_trust_sanitizer as sanitizer
 
 
 # Mapping of string operators to actual functions, used as query parameters