How to remove html / javascript from text input in django

Question

What is the easiest way to remove all html / javascript from a string?

Answer 1

If you want to cut tags in python, you can use:

from django.utils.html import strip_tags strip_tags(string_value) 

EDIT: If you use strip_tags, you should update django. Because security researchers have found a way around the strip_tags. Additional information: http://www.mehmetince.net/django-strip_tags-bypass-vulnerability-exploit/

Answer 2

Filter striptags .

 {{ value|striptags }} 

Answer 3

nice snippet if you want to keep multiple tags and share the rest:

http://djangosnippets.org/snippets/295/