Sanitize rendered markdown

app/views/comments/_comment.html.erb

@@ -13,7 +13,7 @@
       <% end %>
     </div>
     <div class="comment__body txt-align-start">
-      <%= comment.body_html %>
+      <%= sanitize comment.body_html %>
     </div>
   </div>
 <% end %>

config/initializers/sanitization.rb

@@ -0,0 +1,3 @@
+Rails.application.config.after_initialize do
+  Rails::HTML5::SafeListSanitizer.allowed_tags.merge(%w[ table tr td th thead tbody details summary ])
+end