Andrew Kvalheim
80d7ac545c
Set nofollow on links in Markdown content
...
To disincentivize spamdexing, links in user-generated content should be
disavowed by annotation with `rel="nofollow"` attributes:
- https://en.wikipedia.org/wiki/Nofollow
Automated spam has already targeted OSEM in the wild:
- https://github.com/SeaGL/organization/issues/274
Ideally link annotation would be performed during Markdown rendering or
a single sanitization pass, but this is currently an unresolved issue:
- https://github.com/vmg/redcarpet/issues/720
2023-03-03 17:16:53 -08:00
Andrew Kvalheim
c54a8a1238
Add tests of HTML sanitization
2023-03-03 16:50:20 -08:00
Andrew Kvalheim
685d79e44b
Correct use of Redcarpet’s safe_links_only flag
2022-03-17 17:03:30 -07:00
Andrew Kvalheim
a281110b29
Add test of markdown link protocol sanitization
2022-03-17 16:44:27 -07:00
Andrew Kvalheim
e486ce55d7
Remove test of implementation details
2022-03-17 16:13:47 -07:00
Henne Vogelsang
a662ed4cf8
Sanitize rendered markdown
...
Fixes #2892
2021-10-11 18:10:03 +02:00
Henne Vogelsang
2c520d9975
Switch to fenced code blocks in markdown
...
`:fenced_code_blocks:` Blocks delimited with 3 or more ~ or backticks will be considered as code, without the need to be indented. An optional language name may be added at the end of the opening fence for the code block.
`:disable_indented_code_blocks:` Do not parse usual markdown code blocks. Markdown converts text with four spaces at the front of each line to code blocks. This option prevents it from doing so. Recommended to use with fenced_code_blocks: true.
Fixes #2764
2021-07-09 11:17:52 +02:00
James Mason
6d31dfeef4
Add frozen_string_literal magic comment
...
re: https://www.rubydoc.info/gems/rubocop/RuboCop/Cop/Style/FrozenStringLiteralComment
2018-05-09 06:54:26 -07:00
Agrim Mittal
255744268b
shift relevant functions to versions_helper
2017-05-26 15:47:01 +03:00
hitman
d9925f00e9
add volunteers helper
2017-05-26 15:47:01 +03:00