Sanitize input in Django Rest Framework

Question

If I send something like

{
    "description": "Hello World <script>alert('hacked');</script>"
}

to my django rest framework view, I want to get rid of the the script tags.

1. Is there a convenient way to do this, that does not involve overwriting all the things and add strip_tags?
2. What else is to do to sanitize input?
3. Did I really overread that section in the drf docs or isn't that covered?

Answer 1

Ignore the answers here, they are terrible.

Use bleach. You won't get every edge case. This is the situation to use a library in. Your client has control of the client side by definition.