scinote-web/app/helpers/input_sanitize_helper.rb

19 lines
396 B
Ruby
Raw Normal View History

2017-01-03 05:27:12 +08:00
module InputSanitizeHelper
def sanitize_input(text)
ActionController::Base.helpers.sanitize(
text,
tags: Constants::WHITELISTED_TAGS,
attributes: Constants::WHITELISTED_ATTRIBUTES
)
2017-01-03 05:27:12 +08:00
end
def escape_input(text)
ERB::Util.html_escape(text)
end
def custom_auto_link(text, args)
args[:sanitize] = false
auto_link(sanitize_input(text), args)
end
2017-01-03 05:27:12 +08:00
end