Merge pull request #347 from Instanssi/nh3-html-field

NH3 html field

backend/Instanssi/common/html/fields.py

@@ -0,0 +1,11 @@
+from typing import Any
+
+import nh3
+from django.db.models import TextField
+
+
+class SanitizedHtmlField(TextField):
+    def to_python(self, value: Any) -> str | None:
+        if value := super().to_python(value):
+            value = nh3.clean(value)
+        return value

backend/Instanssi/ext_blog/migrations/0007_alter_blogentry_text.py

@@ -0,0 +1,20 @@
+# Generated by Django 5.0.3 on 2024-04-01 22:05
+
+from django.db import migrations
+
+import Instanssi.common.html.fields
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("ext_blog", "0006_alter_blogentry_date"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="blogentry",
+            name="text",
+            field=Instanssi.common.html.fields.SanitizedHtmlField(verbose_name="Teksti"),
+        ),
+    ]

backend/Instanssi/ext_blog/models.py

@@ -4,14 +4,15 @@
 from django.db.models import QuerySet
 from django.utils import timezone
 
+from Instanssi.common.html.fields import SanitizedHtmlField
 from Instanssi.kompomaatti.models import Event
 
 
 class BlogEntry(models.Model):
     event = models.ForeignKey(Event, verbose_name="Tapahtuma", on_delete=models.PROTECT)
     user = models.ForeignKey(User, verbose_name="Käyttäjä", on_delete=models.SET_NULL, null=True)
     title = models.CharField("Otsikko", help_text="Lyhyt otsikko entrylle.", max_length=128)
-    text = models.TextField("Teksti")
+    text = SanitizedHtmlField("Teksti")
     date = models.DateTimeField("Aika", default=timezone.now)
     public = models.BooleanField(
         "Julkinen",