Fixed XSS from markdown()

This commit is contained in:
chrniedz 2017-01-06 17:06:21 -06:00
parent a42240b5a6
commit 436c4fd972
4 changed files with 14 additions and 1 deletions

View file

@ -6,4 +6,8 @@ FactoryGirl.define do
description { Faker::Lorem.paragraph }
website_link { Faker::Internet.url }
end
factory :lodging_xss, parent: :lodging do
description { "<div id='divInjectedElement'></div>" }
end
end