BeautifulSoup防止跨站脚本攻击

pip install beautifulsoup4

def add_article(request):
    if request.method == 'POST':
        content = request.POST.get('content')
        title = request.POST.get('title')
        res = BeautifulSoup(content, 'html.parser')
        tags = res.find_all()
        for tag in tags:
            if tag.name == 'script':
                tag.decompose()
        desc = res.text[0:150]
        models.Article.objects.create(title=title, content=str(res), desc=desc, blog=request.user.blog)
    return render(request, 'backend/add_article.html', locals())