fixes js injection for proposal description

2015-09-13 12:11:39 +02:00
parent f3af263e68
commit f1dd550cd9
1 changed files with 4 additions and 0 deletions
--- a/app/models/proposal.rb
+++ b/app/models/proposal.rb
@@ -40,6 +40,10 @@ class Proposal < ActiveRecord::Base
    cached_votes_up/flags_count.to_f < 5
  end

+  def description
+    super.try :html_safe
+  end
+
  def tag_list_with_limit(limit = nil)
    return tags if limit.blank?