Add noopener and noreferer to links in user generated content

[rails.git] / config / initializers / sanitize.rb

diff --git a/config/initializers/sanitize.rb b/config/initializers/sanitize.rb
index 7ae94feef35b276c1dc6a7b1d49fd60c0c316d1e..c7b7b33266ab0024a5ab3c5a79bf9ff5b69e6c60 100644 (file)
--- a/config/initializers/sanitize.rb
+++ b/config/initializers/sanitize.rb
@@ -1,5 +1,5 @@
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 

-Sanitize::Config::OSM[:elements] -= %w(div style)
-Sanitize::Config::OSM[:add_attributes] = { 'a' => { 'rel' => 'nofollow' } }
-Sanitize::Config::OSM[:remove_contents] = %w(script style)
+Sanitize::Config::OSM[:elements] -= %w[div style]
+Sanitize::Config::OSM[:add_attributes] = { "a" => { "rel" => "nofollow noopener noreferer" } }
+Sanitize::Config::OSM[:remove_contents] = %w[script style]