From 8bea4f5a9d849efc7415e5db81d8d8b741f1e64a Mon Sep 17 00:00:00 2001
From: Dannon Baker <dannon.baker@gmail.com>
Date: Mon, 15 Apr 2019 16:19:52 -0400
Subject: [PATCH] Sanitize html using galaxy.util.sanitize_html (which in turn
 calls bleach with appropriate configuration) in message.mako

---
 templates/message.mako | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/message.mako b/templates/message.mako
index c22c338da2c..b72eae16c18 100644
--- a/templates/message.mako
+++ b/templates/message.mako
@@ -1,5 +1,5 @@
 <%!
-    import bleach
+    from galaxy.util.sanitize_html import sanitize_html
 
     def inherit(context):
         if context.get('use_panels'):
@@ -63,5 +63,5 @@
         if status not in ("danger", "info", "success", "warning"):
             status = "info"
     %>
-    <div class="message mt-2 alert alert-${status}">${_(bleach.clean(msg))}</div>
+    <div class="message mt-2 alert alert-${status}">${_(sanitize_html(msg))}</div>
 </%def>