hashlash / cimto

Home to exercises
GNU General Public License v3.0
0 stars 1 forks source link

Define allowed HTML tags #16

Open hashlash opened 1 year ago

hashlash commented 1 year ago

For security, we currently only allow some HTML tags (bleach is allowed-list-based), but the editor still uses the default toolbar layout, which might contain tags that are not being allowed. We need to define the allowed tags and configure both CKEditor and bleach with those tags.

References: