Skip to content

sprint 6: table uploads HTML sanitization #271

@slint

Description

@slint

Deposition fields that accept rich/HTML on Zenodo (e.g. description, notes, etc.) are too strict about the HTML tags and attributes that are being sanitized and stripped out.

This prevents some of the more complex HTML tables from being accurately captured in the metadata, like e.g. colspan/rowspan attributes, etc.


For Zenodo devs

For this to happen on Zenodo, the PR inveniosoftware/marshmallow-utils#83 has to be merged, released and integrated. There's probably a small discussion needed with the InvenioRDM community to determine if the larger added set of attributes from OWASP is fine.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions