Possible to only allow target="_blank" but no other values?

[ThiefMaster]

Is there a way to allow <a target="_blank" ....> but no other targets? My usecase is that people sometimes don't know what to use, and if you put target="blank" or similar, then it'll set the window name and two links with the same wrong target would open in the same new tab/window instead of separate ones.

[willkg]

Can you provide a test case so I know specifically what you're asking about?

[ThiefMaster]

<a href="https://google.com" target="_blank">test</a>
<a href="https://google.com" target="foo">test 2</a>
<a href="https://google.com">test 3</a>

->

<a href="https://google.com" target="_blank">test</a>
<a href="https://google.com">test 2</a>
<a href="https://google.com">test 3</a>

[willkg]

There's a target_blank callback that you can use which will enforce a target="_blank". Pretty sure that's not what you want, but you can write your own callback and base it on the target_blank code.

bleach/bleach/callbacks.py

Lines 22 to 32 in 6f0aaaa

	def target_blank(attrs, new=False):
	href_key = (None, "href")
	if href_key not in attrs:
	return attrs
	if attrs[href_key].startswith("mailto:"):
	return attrs
	attrs[(None, "target")] = "_blank"
	return attrs

Hope that helps!