From fcefb64666df8469ad10d3e7deccd5d9e652b929 Mon Sep 17 00:00:00 2001 From: Martin Artnik Date: Fri, 10 Nov 2023 14:33:50 +0100 Subject: [PATCH] Allow data-turbolinks attribute in sanitization [SCI-9683] --- config/initializers/constants.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/config/initializers/constants.rb b/config/initializers/constants.rb index dc55a76a6..27b0721f4 100644 --- a/config/initializers/constants.rb +++ b/config/initializers/constants.rb @@ -328,6 +328,7 @@ class Constants config[:attributes][:all] << 'contenteditable' config[:attributes]['img'] << 'data-mce-token' config[:attributes]['img'] << 'data-source-type' + config[:attributes]['a'] << 'data-turbolinks' config[:protocols]['img']['src'] << 'data' INPUT_SANITIZE_CONFIG = Sanitize::Config.freeze_config(config)