feat: Remove scripts from render
All checks were successful
Build Docker / Build SLDs Image (push) Successful in 34s
Build Docker / Build Main Image (push) Successful in 35s

This commit is contained in:
Nathan Woodburn 2023-11-08 22:51:39 +11:00
parent d4d987944a
commit 3ba951fa42
Signed by: nathanwoodburn
GPG Key ID: 203B000478AD0EF1
2 changed files with 13 additions and 3 deletions

View File

@ -9,3 +9,4 @@ py3dns
passlib passlib
argon2-cffi argon2-cffi
mysql-connector-python mysql-connector-python
beautifulsoup4

View File

@ -1,8 +1,17 @@
from flask import Flask, make_response, redirect, render_template_string, request, jsonify, render_template, send_from_directory from flask import Flask, make_response, redirect, render_template_string, request, jsonify, render_template, send_from_directory
from bs4 import BeautifulSoup
def render(data): def render(data):
if data == "": if data == "":
return "No data found for this domain" return "No data found for this domain"
return render_template_string(data) try:
soup = BeautifulSoup(data, 'html.parser')
for script in soup.find_all('script'):
script.extract()
modified_data = str(soup)
return render_template_string(modified_data)
except Exception as e:
return "<h1>Invalid HTML</h1><br>" + str(e)