chore: Correctly union sets while sanitizing HTML.

openedx · Oct 28, 2024 · f33e70e · f33e70e
1 parent c2b2aab
commit f33e70e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/license_manager/apps/subscriptions/sanitize.py b/license_manager/apps/subscriptions/sanitize.py
@@ -8,7 +8,7 @@ def sanitize_html(html_content):
     while disallowing JavaScript and unsafe protocols.
     """
     # Define allowed tags and attributes
-    allowed_tags = set.union(bleach.ALLOWED_TAGS, set({"span"}))  # Allow all standard HTML tags
+    allowed_tags = set.union(set(bleach.ALLOWED_TAGS), {"span"})  # Allow all standard HTML tags
     allowed_attrs = {"*": ["className", "class", "style", "id"]}
     css_sanitizer = CSSSanitizer(allowed_css_properties=["color", "font-weight"])