mirror of
https://github.com/apache/superset.git
synced 2026-04-17 07:05:04 +00:00
fix(config.py): reset HTML_SANITIZATION to True by default (#35603)
This commit is contained in:
@@ -972,7 +972,7 @@ CORS_OPTIONS: dict[Any, Any] = {
|
||||
# Disabling this option is not recommended for security reasons. If you wish to allow
|
||||
# valid safe elements that are not included in the default sanitization schema, use the
|
||||
# HTML_SANITIZATION_SCHEMA_EXTENSIONS configuration.
|
||||
HTML_SANITIZATION = False
|
||||
HTML_SANITIZATION = True
|
||||
|
||||
# Use this configuration to extend the HTML sanitization schema.
|
||||
# By default we use the GitHub schema defined in
|
||||
|
||||
Reference in New Issue
Block a user