From ce3db053c2a84726e3b0b0d9fed0a77ee38df81e Mon Sep 17 00:00:00 2001
From: Jose Farias <jose@37signals.com>
Date: Fri, 29 Nov 2024 14:34:39 -0600
Subject: [PATCH] Sanitize comment html

---
 app/views/comments/_comment.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/comments/_comment.html.erb b/app/views/comments/_comment.html.erb
index 7efab5588..673edf740 100644
--- a/app/views/comments/_comment.html.erb
+++ b/app/views/comments/_comment.html.erb
@@ -13,7 +13,7 @@
       <% end %>
     </div>
     <div class="comment__body txt-align-start">
-      <%= comment.body_html %>
+      <%= simple_format comment.body_html %>
     </div>
   </div>
 <% end %>