{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/3"},{"label":"Dynamic Content","url":"https://skillfed.io/packages/category/internet-www-http-dynamic-content"}],"enrichment":{"capability":"Provides curated allowlists of HTML tags, attributes, and CSS styles for use with the bleach HTML sanitization library to safely filter user-provided markup.","skillfed_tags":["html-sanitization","security-adjacent","data-package"],"use_cases":["Sanitizing user-submitted HTML in comment systems or forums using bleach with pre-vetted markdown-safe tag allowlists.","Filtering HTML for PDF or print rendering by applying print_tags and print_attrs to remove web-only markup.","Whitelisting CSS properties in user-generated content by passing all_styles or standard_styles to bleach for style attribute sanitization.","Establishing consistent HTML sanitization policies across multiple applications by reusing the same curated allowlists.","Rendering markdown-converted HTML safely by applying the markdown_tags and markdown_attrs presets to bleach.clean()."],"what_it_does":"bleach-allowlist is a data package that bundles pre-curated allowlists of safe HTML tags, attributes, and CSS styles for use with the bleach HTML sanitization library. It eliminates the need to manually define which HTML elements and styles are permitted when filtering user-provided markup. The package includes task-specific presets: markdown_tags and markdown_attrs for rendering markdown-style HTML, print_tags and print_attrs for print/PDF output, and all_styles and standard_styles for CSS property whitelisting.\n\nThe package is designed to be used as a reference or directly passed to bleach.clean() to enforce consistent, vetted sanitization rules across applications. It has no runtime dependencies and installs with low friction, but it is no longer actively maintained\u2014the last commit was in June 2022 and no releases have occurred since August 2020. Users should verify that the allowlists remain suitable for their current HTML and CSS requirements.","worth_installing":"Yes, if you are already using bleach and want to avoid manually curating allowlists. The permissive BSD license and zero runtime dependencies make it low-risk to add. However, the package is abandoned and has not been updated since 2020; verify that its allowlists align with your current HTML/CSS standards and consider monitoring bleach for breaking changes that this package will not address."},"id":"bleach-allowlist","links":{"html":"https://skillfed.io/packages/bleach-allowlist","md":"https://skillfed.io/packages/bleach-allowlist.md","pypi":"https://pypi.org/project/bleach-allowlist/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2020-08-13","license_spdx":null,"license_treatment":"permissive","name":"bleach-allowlist","python_support":"unspecified","summary":"Curated lists of tags and attributes for sanitizing html"},"popularity":{"monthly_downloads":896985,"position":4786,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.0.3"}