Fixed XSS from markdown()

This commit is contained in:
chrniedz 2017-01-06 17:06:21 -06:00
parent a42240b5a6
commit 436c4fd972
4 changed files with 14 additions and 1 deletions

View file

@ -35,4 +35,8 @@ FactoryGirl.define do
end
end
end
factory :event_xss, parent: :event do
abstract { "<div id='divInjectedElement'></div>" }
end
end