sanitises tag names [#8]
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
module ApplicationHelper
|
||||
|
||||
def tags(debate)
|
||||
debate.tag_list.map { |tag| link_to tag, debates_path(tag: tag) }.join(', ').html_safe
|
||||
debate.tag_list.map { |tag| link_to sanitize(tag), debates_path(tag: tag) }.join(', ').html_safe
|
||||
end
|
||||
|
||||
end
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
<div id="tag-cloud">
|
||||
<% tag_cloud Debate.tag_counts, %w[s m l] do |tag, css_class| %>
|
||||
<%= link_to "#{tag.name}(#{tag.taggings_count})", debates_path(tag: tag.name), class: css_class %>
|
||||
<%= link_to sanitize("#{tag.name}(#{tag.taggings_count})"), debates_path(tag: tag.name), class: css_class %>
|
||||
<% end %>
|
||||
</div>
|
||||
|
||||
Reference in New Issue
Block a user