Files
grecia/app/views/pages/custom_page.html.erb
Javi Martín f917f5eed9 Filter image tags everywhere except in custom pages
Allowing image tags everywhere makes us vulnerable to CSRF attacks.
2018-09-12 12:35:28 +02:00

20 lines
522 B
Plaintext

<% provide :title do %><%= @custom_page.title %><% end %>
<div class="row margin-top">
<div class="small-12 medium-9 column">
<h1><%= @custom_page.title %></h1>
<% if @custom_page.subtitle.present? %>
<h2><%= @custom_page.subtitle%></h2>
<% end %>
<%= safe_html_with_links AdminWYSIWYGSanitizer.new.sanitize(@custom_page.content) %>
</div>
<% if @custom_page.print_content_flag %>
<div class="small-12 medium-3 column">
<%= render '/shared/print' %>
</div>
<% end %>
</div>