consul/nairobi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add sanitize to description on moderator activity

Browse Source 
Currently html tags were being displayed in the description.
We used the sanitize method to not display them.
This commit is contained in:
taitus
2021-09-21 12:13:36 +02:00
parent d7015792ea
commit 8e8c009d2c
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/views/admin/activity/show.html.erb
View File

@@ -42,7 +42,7 @@
<% else %> <% else %>
<strong><%= activity.actionable.title %></strong> <strong><%= activity.actionable.title %></strong>
<br> <br>
<%= activity.actionable.description %> <%= sanitize(activity.actionable.description) %>
<% end %> <% end %>
<td class="align-top"> <td class="align-top">
<%= activity.user.name %> (<%= activity.user.email %>) <%= activity.user.name %> (<%= activity.user.email %>)

3
spec/system/admin/activity_spec.rb
View File

@@ -9,7 +9,7 @@ describe "Admin activity" do
context "Proposals" do context "Proposals" do
scenario "Shows moderation activity on proposals" do scenario "Shows moderation activity on proposals" do
proposal = create(:proposal) proposal = create(:proposal, description: "<p>Description with html tag</p>")
visit proposal_path(proposal) visit proposal_path(proposal)
@@ -24,6 +24,7 @@ describe "Admin activity" do
expect(page).to have_content(proposal.title) expect(page).to have_content(proposal.title)
expect(page).to have_content("Hidden") expect(page).to have_content("Hidden")
expect(page).to have_content(admin.user.username) expect(page).to have_content(admin.user.username)
expect(page).to have_css("p", exact_text: "Description with html tag")
end end
end end