From 557cbd24ab6f9fa29bfcaba86f1ef6783999bb56 Mon Sep 17 00:00:00 2001
From: Junv Zhao <wahyd4@gmail.com>
Date: Wed, 16 Dec 2015 23:06:43 +0800
Subject: [PATCH] #45 sanitize html tags and html safe contents

---
 app/views/published_post/show.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/published_post/show.html.erb b/app/views/published_post/show.html.erb
index c8b0a9b..93aba88 100644
--- a/app/views/published_post/show.html.erb
+++ b/app/views/published_post/show.html.erb
@@ -1,6 +1,6 @@
 <%- if @post.content.present? %>
   <div class="post-wrapper">
-    <%= @post.content.html_safe %>
+    <%= sanitize @post.content.html_safe %>
   </div>
   <div class="post-actions" data-read-url="<%= api_v1_post_view_path(@post) %>"></div>
 <%- else %>