Re: stripogram as middleware or templatetag

2006-08-12 Thread dummy
Hi, thank you Ian for the link. I saw a post for SavePost.py, but with a broken link. Brian, I thought to implement a templatetag SAFEHTML, since I came through the admin_doc which has nice links on the doc-model for cross referencing models. But those links will be escaped through a policy

Re: stripogram as middleware or templatetag

2006-08-11 Thread Ian Holsman
Hi Dirktryhttp://svn.zyons.python-hosting.com/trunk/zilbo/common/utils/middleware/SafePost.py(it uses stripogram)It doesn't remove all the exploits to be sure, but it raises the bar a bit.regardsIan.On 12/08/2006, at 8:06 AM, Bryan Chow wrote:What exactly are you trying to achieve with

Re: stripogram as middleware or templatetag

2006-08-11 Thread Bryan Chow
What exactly are you trying to achieve with Strip-o-Gram? Have you considered using Django's built-in STRIPTAGS or REMOVETAGS filters instead? http://www.djangoproject.com/documentation/templates/#removetags Bryan On 8/11/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi All, > > I

stripogram as middleware or templatetag

2006-08-11 Thread dummy
Hi All, I thought about the usage of Chris Withers stripogram [1] as a filter in middleware or filter in the templatetag, but then I read that stripogram isn't aware of some kind of exploits. Has anybody integrated stripogram into django ? Which security riscs should I remember if I do such