bleach
commonmark-spec
Our great sponsors
bleach | commonmark-spec | |
---|---|---|
6 | 48 | |
2,615 | 4,832 | |
0.7% | 0.4% | |
6.4 | 6.9 | |
4 days ago | 3 months ago | |
Python | Python | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bleach
-
What's your favorite alternative to bleach for sanitizing HTML?
I noticed via the changelog for Django 4.2.2 that bleach is deprecated (Django removed mention of it from their docs).
-
I wrote a markdown to html converter
I don't know a golang library for it but https://github.com/mozilla/bleach is a python lib that escapes all the nasty javascript inputs.
-
Django-tinymce and HTML Injection
bleach it!
-
Serialize Django Data for JavaScript
This is an excellent point; I should have addressed safety in my article. I'll point out that in my use case, I'm using `safe` on data I create and not any user-generated data.
You should never use `safe` on user data unless you use something like bleach (https://github.com/mozilla/bleach) to sanitize the data. Even then, you should use caution.
-
Rich text field and django rest framework
Use bleach to sanitize it https://bleach.readthedocs.io/en/latest/
- mutation XSS via allowed math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe,
commonmark-spec
-
How to add a man page to your Ruby project, using kramdown-man and markdown
Edit: this is because GitHub uses cmark-gfm, which is a fork of cmark, which implements the CommonMark variant of markdown. Looks like CommonMark still doesn't support definition lists. :(
-
How do you host documentation for your spouse or other users?
BookStack dev here. There's no specific "import" option but you can use the Markdown editor in BookStack and paste in your Markdown content there. The API is essentially just an endpoint to accept the same kind of data, for of course you could automate against the API for batch import. One thing to keep in mind is that BookStack markdown support is fairly tightly scoped to (commonmark + tables + tasklists), although HTML within MD is supported.
-
On why Markdown is not a good, or even a half-decent, markup language
>A single canonical reference
-
Get ready for Bear 2 - We have a quick blog post with some important details and ways you can get notified once it's out!
Typically with major new releases of software, when the number left of the dot (e.g. 2.0) increases, it’s shipped as a separate product. Not always, but generally. The Bear folks can speak for themselves but IIRC a lot of the code was refactored / rewritten to support, for example, CommonMark. So, under the hood, it’s literally brand new in some respects.
-
Best website to write a rulebook for ttrpgs
I use Obsidian (https://obsidian.md) for a lot of things, including my RPG stuff, and there are options for exporting things as PDFs. It’s great for getting organized and doing research, but I would use other tools for long-form writing and layout. What I like about Obsidian though is that everything is done in Markdown (https://commonmark.org) and I can use Pandoc (https://pandoc.org) to transform the source to whatever I need. The caveat is that Obsidian uses a flavor of Markdown with some non-standard extensions, so a pure Markdown editor like Typora (https://typora.io) might be a better choice depending on your needs.
- What is the most minimal, strictest variant of Markdown?
-
How to display an image
yes, this is the "inventor" of markdown and those rules will always work. Hugo uses something called "Commonmark" which is developed on top of the original markdown. But the original rules will always work too.
-
Lightweight Markup for Ukrainian Texts?
Reddit and many other sites support Markdown as an easy way to add emphasis, links, headings, etc. Markdown does not contain any keywords, as it is intended to be language-independent. However, Markdown syntax makes heavy use of square brackets [] and other characters that are difficult to type with an Ukrainian keyboard layout, e.g., the backtick `.
-
I wish Asciidoc was more popular
Check out commonmark, that is the Markdown standard supported by numerous converters including pandoc.
-
I wrote a markdown to html converter
And if this is an exercise into that you can use a Markdown spec like CommonMark which is the spec Reddit and a variety of other sites use.
What are some alternatives?
lxml - The lxml XML toolkit for Python
pandoc - Universal markup converter
MarkupSafe - Safely add untrusted strings to HTML/XML markup.
kramdown - kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
xhtml2pdf - A library for converting HTML into PDFs using ReportLab
marktext - 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.
html5lib - Standards-compliant library for parsing and serializing HTML documents and fragments in Python
markdown-it-katex - Add Math to your Markdown with a KaTeX plugin for Markdown-it
selectolax - Python binding to Modest and Lexbor engines (fast HTML5 parser with CSS selectors).
rehype-sanitize - plugin to sanitize HTML
cssutils
Joplin - Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.