3 files changed, 3 insertions(+), 3 deletions(-)

M docs/conf.py
M setup.py
M src/wiki/core/markdown/__init__.py

@@ 66,7 66,7 @@ def process_docstring(app, what, name, obj, options, lines):
                 continue
 
             # Decode and strip any html out of the field's help text
-            help_text = bleach.clean(force_text(field.help_text))
+            help_text = bleach.clean(force_text(field.help_text), strip=True)
 
             # Decode and capitalize the verbose name, for use if there isn't
             # any help text

@@ 23,7 23,7 @@ def get_path(fname):
 
 install_requirements = [
     "Django>=1.11,<2.3",
-    "bleach>=2.1,<2.2",
+    "bleach>=3.1.0,<3.2",
     "Pillow",
     "django-nyt>=1.1.5,<1.2",
     "django-mptt>=0.9,<0.10",

@@ 39,7 39,7 @@ class ArticleMarkdown(markdown.Markdown):
             attrs.update(plugin_registry.get_html_attributes().items())
 
             html = bleach.clean(
-                html, tags=tags, attributes=attrs, styles=settings.MARKDOWN_HTML_STYLES,
+                html, tags=tags, attributes=attrs, styles=settings.MARKDOWN_HTML_STYLES, strip=True
             )
         return html