When sanitizing rendered comments, keep <hr> tags and <br> tags. The
former are generated when using "---" in Markdown comments, the latter
are used when putting two spaces at the end of a line.

Fixes FS#56649.
---
 aurweb/scripts/rendercomment.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/aurweb/scripts/rendercomment.py b/aurweb/scripts/rendercomment.py
index 4b64227..5e18fd5 100755
--- a/aurweb/scripts/rendercomment.py
+++ b/aurweb/scripts/rendercomment.py
@@ -119,8 +119,8 @@ def main():
                                                FlysprayLinksExtension(),
                                                GitCommitsExtension(pkgbase),
                                                HeadingExtension()])
-    allowed_tags = bleach.sanitizer.ALLOWED_TAGS + \
-                   ['p', 'pre', 'h4', 'h5', 'h6']
+    allowed_tags = (bleach.sanitizer.ALLOWED_TAGS +
+                    ['p', 'pre', 'h4', 'h5', 'h6', 'br', 'hr'])
     html = bleach.clean(html, tags=allowed_tags)
     save_rendered_comment(conn, commentid, html)
 
-- 
2.17.0

Reply via email to