/// Sanitize HTML with default options. Additionally, dont allow bypassing markdown
/// links and images
pub fn sanitize_html(data: &str) -> String {
- let sanitized = ammonia::Builder::default()
+ ammonia::Builder::default()
.rm_tags(&["a", "img"])
.clean(data)
- .to_string();
- // restore markdown quotes
- sanitized.replace(">", ">")
+ .to_string()
+ // restore markdown quotes
+ .replace(">", ">")
+ // restore white space
+ .replace(" ", " ")
}
pub fn sanitize_html_opt(data: &Option<String>) -> Option<String> {
assert_eq!(sanitized, " hello");
let sanitized = sanitize_html("<img src='http://example.com'> test");
assert_eq!(sanitized, " test");
+ let sanitized = sanitize_html("Hello World");
+ assert_eq!(sanitized, "Hello World");
}
}