[Lxml-checkins] r46372 - lxml/trunk/src/lxml/html

ianb at codespeak.net ianb at codespeak.net
Thu Sep 6 17:40:01 CEST 2007


Author: ianb
Date: Thu Sep  6 17:40:00 2007
New Revision: 46372

Modified:
   lxml/trunk/src/lxml/html/clean.py
Log:
typo in copy

Modified: lxml/trunk/src/lxml/html/clean.py
==============================================================================
--- lxml/trunk/src/lxml/html/clean.py	(original)
+++ lxml/trunk/src/lxml/html/clean.py	Thu Sep  6 17:40:00 2007
@@ -27,6 +27,7 @@
 #     <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
 #   you don't always have to have the charset set, if the page has no charset
 #   and there's UTF7-like code in it.
+# Look at these tests: http://htmlpurifier.org/live/smoketests/xssAttacks.php
 
 
 # This is an IE-specific construct you can have in a stylesheet to
@@ -355,7 +356,7 @@
             doc = fromstring(html)
         else:
             return_string = False
-            doc = copy.deepcopy(doc)
+            doc = copy.deepcopy(html)
         self(doc)
         if return_string:
             return tostring(doc)


More information about the lxml-checkins mailing list