# HG changeset patch # User Pawel Solyga # Date 1242815556 -7200 # Node ID 4e487ffd4102fd8255b9f5619684c9c90dc5c27b # Parent e077dc264dffd02bdf93df31c0fdb49462e32ad8 Add comment to clean_html_content function and update __authors__. diff -r e077dc264dff -r 4e487ffd4102 app/soc/logic/cleaning.py --- a/app/soc/logic/cleaning.py Mon May 18 20:23:42 2009 +0200 +++ b/app/soc/logic/cleaning.py Wed May 20 12:32:36 2009 +0200 @@ -21,6 +21,7 @@ '"Todd Larsen" ', '"Sverre Rabbelier" ', '"Lennard de Rijk" ', + '"Pawel Solyga" ', ] @@ -383,6 +384,10 @@ content = self.cleaned_data.get(field_name) + # clean_html_content is called when writing data into GAE rather than + # when reading data from GAE. This short-circuiting of the sanitizer + # only affects html authored by developers. The isDeveloper test for + # example allows developers to add javascript. if user_logic.isDeveloper(): return content