Fix script injection using markdown

Fixes #16
2018-03-24 19:19:04 +00:00 · 2018-03-24 19:19:04 +00:00 · 4898b69ea0
parent c9073a8324
commit 4898b69ea0
1 changed files with 1 additions and 1 deletions
--- a/app/init.py
+++ b/app/init.py
@ -9,7 +9,7 @@ app = Flask(__name__)
 app.config.from_pyfile(os.environ["FLASK_CONFIG"])

 menu.Menu(app=app)
-markdown.Markdown(app, extensions=["fenced_code"])
+markdown.Markdown(app, extensions=["fenced_code"], safe_mode=True, output_format="html5")
 github = GitHub(app)

 from . import models