https://github.com/andychase/reddit-cssfilter

(Forked from reddit) Parse and validate a safe subset of CSS
https://github.com/andychase/reddit-cssfilter

Last synced: 8 months ago
JSON representation

(Forked from reddit) Parse and validate a safe subset of CSS

• Host: GitHub
• URL: https://github.com/andychase/reddit-cssfilter
• Owner: andychase
• License: other
• Created: 2015-11-09T02:32:19.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2015-11-17T02:59:04.000Z (over 10 years ago)
• Last Synced: 2025-01-27T14:03:59.330Z (over 1 year ago)
• Language: Python
• Homepage:
• Size: 12.7 KB
• Stars: 2
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: readme.rst
  • License: LICENSE

Awesome Lists containing this project

README

          
reddit-cssfilter

================

|Build Status|

cssfilter.py extracted from reddit's source code.

This library allows you to filter "unsafe" css from your users.

**This library requires attribution!:**

When using this library, reddit requires you to put the following information in the splash or the "about" section of your application.

	EXHIBIT B. Attribution Information

	Attribution Copyright Notice: Copyright (c) 2006-2015 reddit Inc. All Rights

	Reserved.

	Attribution Phrase (not exceeding 10 words): Powered by reddit

	Attribution URL: http://code.reddit.com

	Graphic Image as provided in the Covered Code:

	http://code.reddit.com/reddit_logo.png

Info

~~~~

Parse and validate a safe subset of CSS.

The goal of this validation is not to ensure functionally correct stylesheets

but rather that the stylesheet is safe to show to downstream users.  This

includes:

* not generating requests to third party hosts (information leak)

* xss via strange syntax in buggy browsers

Beyond that, every effort is made to allow the full gamut of modern CSS.

Installation

~~~~~~~~~~~~

.. code-block:: bash

	pip install reddit-cssfilter

How to use

~~~~~~~~~~

.. code-block:: python

	import reddit_cssfilter.cssfilter

	cssfilter.validate_css(stylesheet, images)

..

	Validate and re-serialize the user submitted stylesheet.

	

	images is a mapping of subreddit image names to their URLs.  The

	re-serialized stylesheet will have %%name%% tokens replaced with their

	appropriate URLs.

	

	The return value is a two-tuple of the re-serialized (and minified)

	stylesheet and a list of errors.  If the list is empty, the stylesheet is

	valid.

Licence

~~~~~~~

Copyright (c) 2006-2015 reddit Inc. All Rights Reserved.

Common Public Attribution License Version 1.0 (CPAL)

The full license is available here: `reddit Inc. Common Public Attribution License Version 1.0 (CPAL) `_.

.. |Build Status| image:: https://travis-ci.org/andychase/reddit-cssfilter.svg?branch=master

   :target: https://travis-ci.org/andychase/reddit-cssfilter