You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
Metadata-Version: 2.1Name: MarkupSafeVersion: 2.1.5Summary: Safely add untrusted strings to HTML/XML markup.Home-page: https://palletsprojects.com/p/markupsafe/Maintainer: PalletsMaintainer-email: contact@palletsprojects.comLicense: BSD-3-ClauseProject-URL: Donate, https://palletsprojects.com/donateProject-URL: Documentation, https://markupsafe.palletsprojects.com/Project-URL: Changes, https://markupsafe.palletsprojects.com/changes/Project-URL: Source Code, https://github.com/pallets/markupsafe/Project-URL: Issue Tracker, https://github.com/pallets/markupsafe/issues/Project-URL: Chat, https://discord.gg/palletsClassifier: Development Status :: 5 - Production/StableClassifier: Environment :: Web EnvironmentClassifier: Intended Audience :: DevelopersClassifier: License :: OSI Approved :: BSD LicenseClassifier: Operating System :: OS IndependentClassifier: Programming Language :: PythonClassifier: Topic :: Internet :: WWW/HTTP :: Dynamic ContentClassifier: Topic :: Text Processing :: Markup :: HTMLRequires-Python: >=3.7Description-Content-Type: text/x-rstLicense-File: LICENSE.rst
MarkupSafe==========
MarkupSafe implements a text object that escapes characters so it issafe to use in HTML and XML. Characters that have special meanings arereplaced so that they display as the actual characters. This mitigatesinjection attacks, meaning untrusted user input can safely be displayedon a page.
Installing----------
Install and update using `pip`_:
.. code-block:: text
pip install -U MarkupSafe
.. _pip: https://pip.pypa.io/en/stable/getting-started/
Examples--------
.. code-block:: pycon
>>> from markupsafe import Markup, escape
>>> # escape replaces special characters and wraps in Markup >>> escape("<script>alert(document.cookie);</script>") Markup('<script>alert(document.cookie);</script>')
>>> # wrap in Markup to mark text "safe" and prevent escaping >>> Markup("<strong>Hello</strong>") Markup('<strong>hello</strong>')
>>> escape(Markup("<strong>Hello</strong>")) Markup('<strong>hello</strong>')
>>> # Markup is a str subclass >>> # methods and operators escape their arguments >>> template = Markup("Hello <em>{name}</em>") >>> template.format(name='"World"') Markup('Hello <em>"World"</em>')
Donate------
The Pallets organization develops and supports MarkupSafe and otherpopular packages. In order to grow the community of contributors andusers, and allow the maintainers to devote more time to the projects,`please donate today`_.
.. _please donate today: https://palletsprojects.com/donate
Links-----
- Documentation: https://markupsafe.palletsprojects.com/- Changes: https://markupsafe.palletsprojects.com/changes/- PyPI Releases: https://pypi.org/project/MarkupSafe/- Source Code: https://github.com/pallets/markupsafe/- Issue Tracker: https://github.com/pallets/markupsafe/issues/- Chat: https://discord.gg/pallets
|