Sanitize rendered markdown

Fixes #2892
This commit is contained in:
Henne Vogelsang 2021-10-11 17:58:10 +02:00
parent f41b61e259
commit a662ed4cf8
No known key found for this signature in database
GPG key ID: 97DDB66BDAF8D4D6
2 changed files with 4 additions and 3 deletions

View file

@ -195,10 +195,11 @@ module FormatHelper
space_after_headers: true,
no_intra_emphasis: true,
fenced_code_blocks: true,
disable_indented_code_blocks: true
disable_indented_code_blocks: true,
safe_links_only: true
}
markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML.new(escape_html: escape_html), options)
markdown.render(text).html_safe
sanitize(markdown.render(text))
end
def markdown_hint(text='')