plugin XEP-0277: removed cleanXHTML on output data:
- while it is mandatory to clean input data, output data sent by frontends should and need to be clean
- cleaning all output data means that we can't send be sure that all the XHTML we send is not modified
- it's a waste of resources as cleaning today reparse the data with lxml
- behaviour may change in the future (e.g. having an option to use cleaning on output data)
This commit is contained in:
parent
9d9cc53b7d
commit
950af3bf70
1 changed files with 0 additions and 2 deletions
|
|
@ -364,8 +364,6 @@ class XEP_0277(object):
|
|||
converted = yield synt.convert(data[attr], synt.getCurrentSyntax(profile), "XHTML")
|
||||
if '{}_xhtml'.format(elem_name) in data:
|
||||
raise failure.Failure(exceptions.DataError(_("Can't have xhtml and rich content at the same time")))
|
||||
else: # clean the XHTML input
|
||||
converted = yield synt.cleanXHTML(data[attr])
|
||||
|
||||
xml_content = u'<div xmlns="{ns}">{converted}</div>'.format(
|
||||
ns=NS_XHTML,
|
||||
|
|
|
|||
Loading…
Reference in a new issue