gunghogeoduck/osem-fcy
1
0
Fork 0
mirror of https://github.com/openSUSE/osem.git synced 2026-08-13 19:54:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Testing if I can squash this way (#1)

Browse source 
* Fixed XSS resulting from markdown() method
This commit is contained in:
Chris Niedzwiedz 2017-01-09 12:27:11 -06:00 • committed by GitHub
parent c552d08b8e
commit d2e177cac4
7 changed files with 61 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/helpers/application_helper.rb
View file

@ -260,7 +260,7 @@ module ApplicationHelper
space_after_headers: true,
no_intra_emphasis: true
}
markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML, options)
markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML.new(escape_html: true), options)
markdown.render(text).html_safe
end