bleach_html_sanitizer_with_markdown_allowlist_tags.py

1import bleach
2from bleach_allowlist import markdown_tags, markdown_attrs
3
4# Some untrusted HTML from a user
5unsafe_html = '<script>alert("XSS")</script><p>Hello <a href="http://example.com" onclick="stealCookies()">World</a>!</p>'
6
7# Use bleach with the curated allowlist from bleach-allowlist
8safe_html = bleach.clean(
9    unsafe_html,
10    tags=markdown_tags,
11    attributes=markdown_attrs
12)
13
14print(safe_html)
15# Output: &lt;script&gt;alert("XSS")&lt;/script&gt;<p>Hello <a href="http://example.com">World</a>!</p>