#45 sanitize html tags and html safe contents

2026-08-08 21:07:08 +10:00 · 2015-12-16 23:06:43 +08:00
parent 3475b98a16
commit 557cbd24ab
1 changed files with 1 additions and 1 deletions
@@ -1,6 +1,6 @@
 <%- if @post.content.present? %>
  <div class="post-wrapper">
-    <%= @post.content.html_safe %>
+    <%= sanitize @post.content.html_safe %>
  </div>
  <div class="post-actions" data-read-url="<%= api_v1_post_view_path(@post) %>"></div>
 <%- else %>