diff options
Diffstat (limited to 'app.py')
| -rw-r--r-- | app.py | 7 |
1 files changed, 5 insertions, 2 deletions
@@ -39,8 +39,11 @@ ALLOWED_STATIC_EXTENSIONS = { } -def safe_url(filename): - return quote(str(filename or ""), safe="/") +def safe_url(url): + raw = str(url or "").strip() + if not raw: + return "" + return quote(raw, safe=":/?&=#%+~@!$,;*-._") |
