scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-10-06 11:57:16 +08:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #6621 from artoscinote/ma_SCI_9682

Browse source 
Allow data-turbolinks attribute in sanitization [SCI-9683]
This commit is contained in:
Martin Artnik 2023-11-10 14:38:20 +01:00 • committed by GitHub
commit bccce6bec0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
config/initializers/constants.rb
View file

@ -328,6 +328,7 @@ class Constants
config[:attributes][:all] << 'contenteditable' config[:attributes][:all] << 'contenteditable'
config[:attributes]['img'] << 'data-mce-token' config[:attributes]['img'] << 'data-mce-token'
config[:attributes]['img'] << 'data-source-type' config[:attributes]['img'] << 'data-source-type'
config[:attributes]['a'] << 'data-turbolinks'
config[:protocols]['img']['src'] << 'data' config[:protocols]['img']['src'] << 'data'
INPUT_SANITIZE_CONFIG = Sanitize::Config.freeze_config(config) INPUT_SANITIZE_CONFIG = Sanitize::Config.freeze_config(config)