pypa / readme_renderer

Safely render long_description/README files in Warehouse
Apache License 2.0
158 stars 89 forks source link

Whitelist the allowed CSS classes #120

Closed dstufft closed 1 year ago

dstufft commented 6 years ago

This should prevent people from being able to apply classes to their rendered text that we did not otherwise want to allow them to do. For instance they won't be able to apply the same CSS class to their image that our logo uses, which would theoretically let them replace our logo.