Changeset 13805 for main/waeup.ikoba/trunk/src/waeup/ikoba/documents

Timestamp:

6 Apr 2016, 08:51:19 (9 years ago)

Author:

Henrik Bettermann

Message:

Forbid style and script elements in html fields.

See r13235.

File:

• main/waeup.ikoba/trunk/src/waeup/ikoba/documents/interfaces.py (modified) (2 diffs)

main/waeup.ikoba/trunk/src/waeup/ikoba/documents/interfaces.py

@@ -19 +19 @@
 from zope import schema
 from waeup.ikoba.interfaces import (
-    IIkobaObject, validate_id,
+    IIkobaObject, validate_id, validate_html,
     ContextualDictSourceFactoryBase)
 from waeup.ikoba.interfaces import MessageFactory as _
@@ -98 +98 @@
         title = _(u'Multilingual content in HTML format'),
         required = False,
+        constraint=validate_html,
         )