I am using TinyMCE editor for textarea fileds in Django forms.
Now, in order to display the rich text back to the user, I am forced to use the \"safe\" filter in Dja
You can use the template filter "removetags" and just remove 'script'.
Note that removetags
has been removed from Django 2.0. Here is the deprecation notice from the docs:
Deprecated since version 1.8:
removetags
cannot guarantee HTML safe output and has been deprecated due to security concerns. Consider using bleach instead.