Files
nairobi/app/helpers/banners_helper.rb
Javi Martín e470ea1cc1 Avoid JavaScript execution in banner URLs
Using `sanitize` we make sure the `href` attribute does not execute any
dangerous code. The possibility of a banner pointing to a dangerous URL
was very reduced, though, since only administrators can edit this
attribute.
2019-11-13 19:52:15 +01:00

29 lines
645 B
Ruby

module BannersHelper
def has_banners?
@banners.present? && @banners.count > 0
end
def banner_default_bg_color
"#e7f2fc"
end
def banner_default_font_color
"#222222"
end
def banner_bg_color_or_default
@banner.background_color.presence || banner_default_bg_color
end
def banner_font_color_or_default
@banner.font_color.presence || banner_default_font_color
end
def banner_target_link(banner)
link_to banner.target_url do
content_tag(:h2, banner.title, style: "color:#{banner.font_color}") +
content_tag(:h3, banner.description, style: "color:#{banner.font_color}")
end
end
end