home / content / pypi_packages

pypi_packages: datasette-render-html

This data as json

name summary classifiers description author author_email description_content_type home_page keywords license maintainer maintainer_email package_url platform project_url project_urls release_url requires_dist requires_python version yanked yanked_reason
datasette-render-html Datasette plugin that renders specified cells as HTML [] # datasette-render-html [![PyPI](https://img.shields.io/pypi/v/datasette-render-html.svg)](https://pypi.org/project/datasette-render-html/) [![CircleCI](https://circleci.com/gh/simonw/datasette-render-html.svg?style=svg)](https://circleci.com/gh/simonw/datasette-render-html) [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](https://github.com/simonw/datasette-render-html/blob/master/LICENSE) This Datasette plugin lets you configure Datasette to render specific columns as HTML in the table and row interfaces. This means you can store HTML in those columns and have it rendered as such on those pages. If you have a database called `docs.db` containing a `glossary` table and you want the `definition` column in that table to be rendered as HTML, you would use a `metadata.json` file that looks like this: { "databases": { "docs": { "tables": { "glossary": { "plugins": { "datasette-render-html": { "columns": ["definition"] } } } } } } } ## Security This plugin allows HTML to be rendered exactly as it is stored in the database. As such, you should be sure only to use this against columns with content that you trust - otherwise you could open yourself up to an [XSS attack](https://owasp.org/www-community/attacks/xss/). It's possible to configure this plugin to apply to columns with specific names across whole databases or the full Datasette instance, but doing so is not safe. It could open you up to XSS vulnerabilities where an attacker composes a SQL query that results in a column containing unsafe HTML. As such, you should only use this plugin against specific columns in specific tables, as shown in the example above. Simon Willison   text/markdown https://github.com/simonw/datasette-render-html   Apache License, Version 2.0     https://pypi.org/project/datasette-render-html/   https://pypi.org/project/datasette-render-html/ {"Homepage": "https://github.com/simonw/datasette-render-html"} https://pypi.org/project/datasette-render-html/0.1.2/ ["datasette", "pytest ; extra == 'test'"]   0.1.2 0  

Links from other tables

  • 3 rows from package in pypi_versions
  • 3 rows from package in pypi_releases
Powered by Datasette · Queries took 0.949ms