python - Sanitize input in Django Rest Framework -
if send like
{ "description": "hello world <script>alert('hacked');</script>" }
to django rest framework view, want rid of the script tags.
- is there convenient way this, not involve overwriting things , add
strip_tags
? - what else sanitize input?
- did overread section in drf docs or isn't covered?
ignore answers here, terrible.
use bleach. won't every edge case. the situation use library in. client has control of client side definition.
Comments
Post a Comment