From: Tom Hughes <tom@compton.nu>
Date: Fri, 16 Mar 2012 22:37:15 +0000 (+0000)
Subject: Drop the contents of <script> and <style> tags when we strip them
X-Git-Tag: live~5666
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/b1cb7bb8191ec2c25edb12d71670cfb883449c98?hp=7be823bb11ad2aa93ffd4d85cc7f11469a867fa2

Drop the contents of <script> and <style> tags when we strip them
---

diff --git a/config/initializers/sanitize.rb b/config/initializers/sanitize.rb
index 7360e2701..0df38f0fa 100644
--- a/config/initializers/sanitize.rb
+++ b/config/initializers/sanitize.rb
@@ -1,3 +1,4 @@
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 
 Sanitize::Config::OSM[:add_attributes] = { 'a' => { 'rel' => 'nofollow' } }
+Sanitize::Config::OSM[:remove_contents] = [ 'script', 'style' ]
diff --git a/test/unit/rich_text_test.rb b/test/unit/rich_text_test.rb
new file mode 100644
index 000000000..a628eed20
--- /dev/null
+++ b/test/unit/rich_text_test.rb
@@ -0,0 +1,4 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class RichTextTest < ActiveSupport::TestCase
+end