6

I am building a project based on the Stack Overflow data dump.

As per Database schema documentation for the public data dump and SEDE the Body of Posts / PostsWithDeleted is given as rendered HTML and not Markdown.

Is this HTML sanitized?

1
  • 3
    Sanitized as in how? There wouldn't be anything else in the body that could execute, but there may be some CSS style classes that are expected.
    – Makoto
    May 25 at 17:02

1 Answer 1

8

Yes, that HTML is sanitized. It is the same rendered HTML that we serve when you view the page live on our website, cached so that the HTML doesn't have to be rendered from Markdown every time the page is loaded.

As part of our rendering process, we sanitize any HTML that users provide by stripping all elements not on this allow list, including any with attributes we do not support.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .