Fixes in corefields

paramecio2/libraries/db/corefields.py

@@ -1,6 +1,7 @@
 from paramecio2.libraries.db.webmodel import PhangoField
 from paramecio2.libraries.db import coreforms
 from paramecio2.libraries.i18n import I18n
+from bs4 import BeautifulSoup
 
 class IntegerField(PhangoField):
     
@@ -157,10 +158,17 @@ class HTMLField(TextField):
     
     def __init__(self, name, required=False):
         super().__init__(name, required)
+        self.trusted_tags=[]
 
     def check(self, value):
         
-        return re.sub('<.*?script?>', '', value)
+        soup=BeautifulSoup(value, features='html.parser')
+
+        for tag in soup.findAll(True):
+            if tag.name not in self.trusted_tags:
+                tag.hidden=True
+
+        return soup.renderContents().decode('utf-8')
 
 
 class ForeignKeyField(IntegerField):