Fix script injection using markdown

Fixes #16

diff --git a/app/__init__.py b/app/__init__.py
index d9c2b384a14f6c8b9726f037f92b09742336348e..b5aa36c9a57fc0c13e9dffe2d8460e2ab743d6c4 100644 (file)
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -9,7 +9,7 @@ app = Flask(__name__)
 app.config.from_pyfile(os.environ["FLASK_CONFIG"])
 
 menu.Menu(app=app)
-markdown.Markdown(app, extensions=["fenced_code"])
+markdown.Markdown(app, extensions=["fenced_code"], safe_mode=True, output_format="html5")
 github = GitHub(app)
 
 from . import models