From f1dd550cd9b922792ce638c55e41765614ebf14f Mon Sep 17 00:00:00 2001 From: rgarcia Date: Sun, 13 Sep 2015 12:11:39 +0200 Subject: [PATCH] fixes js injection for proposal description --- app/models/proposal.rb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/app/models/proposal.rb b/app/models/proposal.rb index 6d94b5a79..36bc8805a 100644 --- a/app/models/proposal.rb +++ b/app/models/proposal.rb @@ -40,6 +40,10 @@ class Proposal < ActiveRecord::Base cached_votes_up/flags_count.to_f < 5 end + def description + super.try :html_safe + end + def tag_list_with_limit(limit = nil) return tags if limit.blank?