Use "strip" in bleach

This removes forbidden html, rather than leaving them in place but unrendered.
2022-07-04 13:45:28 -07:00 · 2022-07-04 13:45:28 -07:00 · 9d9b7f366a
commit 9d9b7f366a
parent 70beb24d95
2 changed files with 4 additions and 3 deletions
--- a/bookwyrm/utils/sanitizer.py
+++ b/bookwyrm/utils/sanitizer.py
@ -22,4 +22,5 @@ def clean(input_text):
            "li",
        ],
        attributes=["href", "rel", "src", "alt"],
+        strip=True,
    )