pypa / readme_renderer

Safely render long_description/README files in Warehouse
Apache License 2.0
158 stars 89 forks source link

Allow <a rel="me"> to pass the sanitiser? #305

Open GreenReaper opened 4 months ago

GreenReaper commented 4 months ago

While trying to verify a link from a Mastodon instance to a Mailman Postorius mailing list profile, I found that the rel="me" attribute on the reciprocal link back to Mastodon had been replaced by a rel="nofollow". After a little digging I found they were using this module, which does not include rel in the list of allowed attributes for <a>.

Would it be possible to enable <a rel>, or at least <a rel="me">? There are some problematic uses of rel, such as canonical, but they don't seem to be allowed in the variant of the attribute. I imagine license, author and prev/next might also be useful for documentation purposes.