perbaikan remove htmltag

1 parent 50201679
user_id/users.user_name,group_id/groups.group_name user_id/users.user_name,group_id/groups.group_name
admin,admin
\ No newline at end of file \ No newline at end of file
...@@ -3,6 +3,7 @@ from cgi import FieldStorage ...@@ -3,6 +3,7 @@ from cgi import FieldStorage
import os import os
from datetime import datetime from datetime import datetime
from email.utils import parseaddr from email.utils import parseaddr
import lxml
from webob.multidict import MultiDict from webob.multidict import MultiDict
import colander import colander
...@@ -147,6 +148,8 @@ class BaseView(object): ...@@ -147,6 +148,8 @@ class BaseView(object):
if self.allow_check and self.allow_delete: if self.allow_check and self.allow_delete:
self.list_buttons.append(btn_delete) self.list_buttons.append(btn_delete)
self.html_tag_cleaner = True
def init_session(self, request): def init_session(self, request):
# # if not request.user: # # if not request.user:
# if "g_state" in request.cookies: # if "g_state" in request.cookies:
...@@ -995,6 +998,11 @@ class BaseView(object): ...@@ -995,6 +998,11 @@ class BaseView(object):
if k not in values: if k not in values:
if v: if v:
values[k] = v values[k] = v
for k, v in values.items():
if v and self.html_tag_cleaner and isinstance(v, str) and v != "":
values[k] = lxml.html.fromstring(v).text_content()
log.debug(f"Base save_request: {values}") log.debug(f"Base save_request: {values}")
return self.save(values, self.req.user, row) return self.save(values, self.req.user, row)
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!