Question

I want to purify user input in Django.

I know there is Django Html Purifier but maybe there is something lighter? What if the tags I’d like to allow users to use are very limited, e.g. just <b>? Maybe there is something built-in Django I could use?

Answer 1

django-bleach derived from a PHP implementation is commonly used.

The project is here: https://bitbucket.org/ionata/django-bleach

It’s usage is really simple and according to the docs seems to do what you want:

# Which HTML tags are allowed
BLEACH_ALLOWED_TAGS = ['p', 'b', 'i', 'u', 'em', 'strong', 'a']

Cheers 🙂