diff options
author | rubenwardy <rw@rubenwardy.com> | 2020-01-22 22:10:02 +0000 |
---|---|---|
committer | rubenwardy <rw@rubenwardy.com> | 2020-01-22 22:10:02 +0000 |
commit | 981ae74e5cda458608d64a1aa3b62cb62a8fc4f6 (patch) | |
tree | 5bc5286d7e9104c6e4caafb62263ba5c4403864d /app/blueprints/users/profile.py | |
parent | 2b661939699ce8e7c39569d33f2e9d42ef562a79 (diff) | |
download | cheatdb-981ae74e5cda458608d64a1aa3b62cb62a8fc4f6.tar.xz |
Improve markdown escaping
Fixes #118
Diffstat (limited to 'app/blueprints/users/profile.py')
-rw-r--r-- | app/blueprints/users/profile.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/blueprints/users/profile.py b/app/blueprints/users/profile.py index 37ea992..0036fa9 100644 --- a/app/blueprints/users/profile.py +++ b/app/blueprints/users/profile.py @@ -18,7 +18,7 @@ from flask import * from flask_user import * from flask_login import login_user, logout_user -from app import markdown +from app.markdown import render_markdown from . import bp from app.models import * from flask_wtf import FlaskForm @@ -153,7 +153,7 @@ def send_email(username): form = SendEmailForm(request.form) if form.validate_on_submit(): text = form.text.data - html = markdown(text) + html = render_markdown(text) task = sendEmailRaw.delay([user.email], form.subject.data, text, html) return redirect(url_for("tasks.check", id=task.id, r=next_url)) |