gunghogeoduck/osem-fcy
1
0
Fork 0
mirror of https://github.com/openSUSE/osem.git synced 2026-08-13 11:44:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Sanitize rendered markdown

Browse source 
Fixes #2892
This commit is contained in:
Henne Vogelsang 2021-10-11 17:58:10 +02:00
parent f41b61e259
commit a662ed4cf8
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6
2 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
app/helpers/format_helper.rb
View file

@ -195,10 +195,11 @@ module FormatHelper
space_after_headers: true,
no_intra_emphasis: true,
fenced_code_blocks: true,
disable_indented_code_blocks: true
disable_indented_code_blocks: true,
safe_links_only: true
}
markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML.new(escape_html: escape_html), options)
markdown.render(text).html_safe
sanitize(markdown.render(text))
end
def markdown_hint(text='')

2
spec/helpers/format_helper_spec.rb
View file

@ -11,7 +11,7 @@ describe FormatHelper, type: :helper do
it 'should return HTML for header markdown' do
expect(Redcarpet::Markdown).to receive(:new)
.with(Redcarpet::Render::HTML, autolink: true, space_after_headers: true, no_intra_emphasis: true, fenced_code_blocks: true, disable_indented_code_blocks: true)
.with(Redcarpet::Render::HTML, autolink: true, space_after_headers: true, no_intra_emphasis: true, fenced_code_blocks: true, disable_indented_code_blocks: true, safe_links_only: true)
.and_call_original
expect(markdown('# this is my header')).to eq "<h1>this is my header</h1>\n"