]> git.openstreetmap.org Git - rails.git/commit
projects / rails.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f442bb9) | patch
Strip away class attributes from sanitized outputs
authorAndy Allan <git@gravitystorm.co.uk>
Wed, 24 Mar 2021 19:15:21 +0000 (19:15 +0000)
committerAndy Allan <git@gravitystorm.co.uk>
Wed, 24 Mar 2021 19:15:21 +0000 (19:15 +0000)
commitd7eac9b5a8f4cbbeb4ed3d73464993bfd5888935
tree26c1257920998b6c7b4aaa048864c7c0176e23f8tree | snapshot
parentf442bb9e80c07fa452d56ed6a692e0b2eeb829d3commit | diff
Strip away class attributes from sanitized outputs

There's a lot of shenanigans that are possible when you can apply
arbitrary classes to the rendered output.
config/initializers/sanitize.rb diff | blob | history
test/lib/rich_text_test.rb diff | blob | history
The OpenStreetMap web site