diff options
| author | Joar Wandborg <git@wandborg.com> | 2011-06-15 23:07:54 +0200 |
|---|---|---|
| committer | Joar Wandborg <git@wandborg.com> | 2011-06-15 23:07:54 +0200 |
| commit | 44e51d3464e719e596e1480b7af2957742a9085b (patch) | |
| tree | 0b5809274b32bde08403b212e55d2fec55ce2929 /mediagoblin/submit | |
| parent | 9e883ed3b223311e3325e41e75dec7ee82875ac2 (diff) | |
| download | mediagoblin-44e51d3464e719e596e1480b7af2957742a9085b.tar.lz mediagoblin-44e51d3464e719e596e1480b7af2957742a9085b.tar.xz mediagoblin-44e51d3464e719e596e1480b7af2957742a9085b.zip | |
Made changes according to http://bugs.foocorp.net/issues/363#note-5
Diffstat (limited to 'mediagoblin/submit')
| -rw-r--r-- | mediagoblin/submit/views.py | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/mediagoblin/submit/views.py b/mediagoblin/submit/views.py index 21562e6f..437a5a51 100644 --- a/mediagoblin/submit/views.py +++ b/mediagoblin/submit/views.py @@ -19,11 +19,13 @@ from cgi import FieldStorage from werkzeug.utils import secure_filename -from mediagoblin.util import render_to_response, redirect +from mediagoblin.util import render_to_response, redirect, clean_html from mediagoblin.decorators import require_active_login from mediagoblin.submit import forms as submit_forms, security from mediagoblin.process_media import process_media_initial +import markdown + @require_active_login def submit_start(request): @@ -49,11 +51,11 @@ def submit_start(request): entry['title'] = request.POST['title'] or unicode(splitext(filename)[0]) entry['description'] = request.POST.get('description') - import markdown md = markdown.Markdown( safe_mode = 'escape') - entry['description_html'] = md.convert( - entry['description']) + entry['description_html'] = clean_html( + md.convert( + entry['description'])) entry['media_type'] = u'image' # heh entry['uploader'] = request.user['_id'] |