scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-02-01 12:38:30 +08:00
Code Issues Projects Releases Packages Wiki Activity

Allow data-turbolinks attribute in sanitization [SCI-9683]

Browse source
This commit is contained in:
Martin Artnik 2023-11-10 14:33:50 +01:00
parent dd7d95f6c4
commit fcefb64666
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
config/initializers/constants.rb
View file

@ -328,6 +328,7 @@ class Constants
config[:attributes][:all] << 'contenteditable' config[:attributes][:all] << 'contenteditable'
config[:attributes]['img'] << 'data-mce-token' config[:attributes]['img'] << 'data-mce-token'
config[:attributes]['img'] << 'data-source-type' config[:attributes]['img'] << 'data-source-type'
config[:attributes]['a'] << 'data-turbolinks'
config[:protocols]['img']['src'] << 'data' config[:protocols]['img']['src'] << 'data'
INPUT_SANITIZE_CONFIG = Sanitize::Config.freeze_config(config) INPUT_SANITIZE_CONFIG = Sanitize::Config.freeze_config(config)