accepts no html tags in text_with_links sanitize

2015-09-10 20:42:57 +02:00
parent 5ecbe01d47
commit ec4119582c
1 changed files with 1 additions and 1 deletions
--- a/app/helpers/text_with_links_helper.rb
+++ b/app/helpers/text_with_links_helper.rb
@@ -2,7 +2,7 @@ module TextWithLinksHelper

  def text_with_links(text)
    return unless text
-    sanitized = sanitize text
+    sanitized = sanitize text, tags: [], attributes: []
    Rinku.auto_link(sanitized, :all, 'target="_blank" rel="nofollow"').html_safe
  end