bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #873 from basecamp/flavorjones/fix-lightbox-attributes

Browse Source 
Ensure sanitizer config applies to ActionText in production
This commit is contained in:
Mike Dalessio
2025-08-08 13:56:18 -04:00
committed by GitHub
parent e0f7aa8241 6bf61b631e
commit c1cb25f3c5
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/initializers/sanitization.rb
+3
View File
@@ -1,4 +1,7 @@
Rails.application.config.after_initialize do
Rails::HTML5::SafeListSanitizer.allowed_tags.merge(%w[ s table tr td th thead tbody details summary video source])
Rails::HTML5::SafeListSanitizer.allowed_attributes.merge(%w[ data-turbo-frame controls type width data-action data-lightbox-target data-lightbox-url-value ])
ActionText::ContentHelper.allowed_tags = Rails::HTML5::SafeListSanitizer.allowed_tags
ActionText::ContentHelper.allowed_attributes = Rails::HTML5::SafeListSanitizer.allowed_attributes
end