From 59db3454849b06501ee124ec20e95bf005f0d63d Mon Sep 17 00:00:00 2001 From: Jorge Manrubia Date: Tue, 7 Oct 2025 09:40:48 +0200 Subject: [PATCH] Don't lose existing values in case they had been set --- config/initializers/sanitization.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/initializers/sanitization.rb b/config/initializers/sanitization.rb index 9073dc7a3..6fae14b25 100644 --- a/config/initializers/sanitization.rb +++ b/config/initializers/sanitization.rb @@ -3,6 +3,6 @@ Rails.application.config.after_initialize do Rails::HTML5::SafeListSanitizer.allowed_attributes.merge(%w[ data-turbo-frame controls type width data-action data-lightbox-target data-lightbox-url-value ]) # ugh, see https://github.com/rails/rails/issues/54478 which I need to fix upstream --mike - ActionText::ContentHelper.allowed_tags = Rails::HTML5::SafeListSanitizer.allowed_tags + [ ActionText::Attachment.tag_name, "figure", "figcaption" ] - ActionText::ContentHelper.allowed_attributes = Rails::HTML5::SafeListSanitizer.allowed_attributes + ActionText::Attachment::ATTRIBUTES + ActionText::ContentHelper.allowed_tags = Rails::HTML5::SafeListSanitizer.allowed_tags.to_a + [ ActionText::Attachment.tag_name, "figure", "figcaption" ] + ActionText::ContentHelper.allowed_tags.to_a + ActionText::ContentHelper.allowed_attributes = Rails::HTML5::SafeListSanitizer.allowed_attributes.to_a + ActionText::Attachment::ATTRIBUTES + ActionText::ContentHelper.allowed_attributes.to_a end