Prevent CORS when importing protocols

2024-09-20 14:45:56 +08:00 · 2016-11-15 17:06:39 +01:00 · 2016-11-15 17:06:39 +01:00 · 29f0557d3c
parent 83160a487b
commit 29f0557d3c
1 changed files with 2 additions and 1 deletions
--- a/app/utilities/protocols_importer.rb
+++ b/app/utilities/protocols_importer.rb
@ -53,7 +53,8 @@ module ProtocolsImporter
      protocol_json['steps'].values.each do |step_json|
      step = Step.create!(
        name: step_json["name"],
-        description: step_json["description"],
+        description: # Sanitize description HTML
+          ActionController::Base.helpers.sanitize(step_json['description']),
        position: step_pos,
        completed: false,
        user: user,