Sanitize label texts automatically

This way we can remove all those `html_safe` calls and we avoid potential XSS attacks in label texts.
2019-10-05 16:42:43 +02:00
parent 2586229e38
commit 75a28fafcb
9 changed files with 27 additions and 7 deletions
--- a/app/views/organizations/registrations/new.html.erb
+++ b/app/views/organizations/registrations/new.html.erb
@@ -34,7 +34,7 @@
                                "/conditions",
                                title: t("shared.target_blank"),
                                target: "_blank")
-                ).html_safe %>
+                ) %>

      <div class="small-12 medium-6 small-centered">
        <%= f.submit t("devise_views.organizations.registrations.new.submit"), class: "button expanded" %>