From b60425746020c5d40ee320ec5803bcf070f87b25 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Oct 13 2015 15:29:14 +0000 Subject: Unless we explicitly accept all images tag, always filter them --- diff --git a/pagure/lib/__init__.py b/pagure/lib/__init__.py index c237ac4..1920249 100644 --- a/pagure/lib/__init__.py +++ b/pagure/lib/__init__.py @@ -2421,7 +2421,7 @@ def clean_input(text, ignore=None): ignore = [ignore] attrs = bleach.ALLOWED_ATTRIBUTES - if ignore and 'img' not in ignore: + if not ignore or not 'img' in ignore: attrs['img'] = filter_img_src tags = bleach.ALLOWED_TAGS + [