Fixed XSS from markdown()

This commit is contained in:
chrniedz 2017-01-06 17:06:21 -06:00
parent a42240b5a6
commit 436c4fd972
4 changed files with 14 additions and 1 deletions

View file

@ -45,4 +45,9 @@ FactoryGirl.define do
end
end
end
factory :user_xss, parent: :user do
biography "<div id='divInjectedElement'></div>"
end
end