Commitc4a85fc

authored

Merge pull request#377 from hugovk/upper-hex-in-css-colour

Allow uppercase hex chararcters in CSS colour check

2 parentsd595d0a +a5a1900 commitc4a85fcCopy full SHA for c4a85fc

File tree

+16

-1

lines changed

+16

-1

lines changed

Lines changed: 3 additions & 0 deletions

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -855,7 +855,7 @@ def sanitize_css(self, style):`
`855`	`855`	`'padding']:`
`856`	`856`	`forkeywordinvalue.split():`
`857`	`857`	`ifkeywordnotinself.allowed_css_keywordsand \`
`858`		`-notre.match(r"^(#[0-9a-f]+\|rgb$\d+%?,\d%?,?\d%?$?\|\d{0,2}\.?\d{0,2}(cm\|em\|ex\|in\|mm\|pc\|pt\|px\|%\|,\|\))?)$",keyword):# noqa`
	`858`	`+notre.match(r"^(#[0-9a-fA-F]+\|rgb$\d+%?,\d%?,?\d%?$?\|\d{0,2}\.?\d{0,2}(cm\|em\|ex\|in\|mm\|pc\|pt\|px\|%\|,\|\))?)$",keyword):# noqa`
`859`	`859`	`break`
`860`	`860`	`else:`
`861`	`861`	`clean.append(prop+': '+value+';')`

Lines changed: 12 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -113,3 +113,15 @@ def test_sanitizer():`
`113`	`113`	`yield (runSanitizerTest,"test_should_allow_uppercase_%s_uris"%protocol,`
`114`	`114`	`"<img src=\"%s:%s\">foo</a>"% (protocol,rest_of_uri),`
`115`	`115`	`"""<img src="%s:%s">foo</a>"""% (protocol,rest_of_uri))`
	`116`	`+`
	`117`	`+`
	`118`	`+deftest_lowercase_color_codes_in_style():`
	`119`	`+sanitized=sanitize_html("<p style=\"border: 1px solid #a2a2a2;\"></p>")`
	`120`	`+expected='<p style=\"border: 1px solid #a2a2a2;\"></p>'`
	`121`	`+assertexpected==sanitized`
	`122`	`+`
	`123`	`+`
	`124`	`+deftest_uppercase_color_codes_in_style():`
	`125`	`+sanitized=sanitize_html("<p style=\"border: 1px solid #A2A2A2;\"></p>")`
	`126`	`+expected='<p style=\"border: 1px solid #A2A2A2;\"></p>'`
	`127`	`+assertexpected==sanitized`

Comments

(0)