mirror of
https://github.com/scinote-eln/scinote-web.git
synced 2024-09-21 15:36:22 +08:00
42 lines
1.4 KiB
Ruby
42 lines
1.4 KiB
Ruby
require 'sanitize'
|
|
|
|
module InputSanitizeHelper
|
|
# Rails default ActionController::Base.helpers.sanitize method call
|
|
# the ActiveRecord connecton method on the caller object which in
|
|
# our cases throws an error when called from not ActiveRecord objects
|
|
# such as Datatables
|
|
def sanitize_input(html, tags = [], attributes = [])
|
|
Sanitize.fragment(
|
|
html,
|
|
elements: Constants::WHITELISTED_TAGS + tags,
|
|
attributes: { all: Constants::WHITELISTED_ATTRIBUTES + attributes },
|
|
css: Constants::WHITELISTED_CSS_ATTRIBUTES
|
|
).html_safe
|
|
end
|
|
|
|
def escape_input(text)
|
|
ERB::Util.html_escape(text)
|
|
end
|
|
|
|
def custom_auto_link(text, options = {})
|
|
simple_f = options.fetch(:simple_format, true)
|
|
team = options.fetch(:team, nil)
|
|
wrapper_tag = options.fetch(:wrapper_tag) { {} }
|
|
tags = options.fetch(:tags) { [] }
|
|
preview_repository = options.fetch(:preview_repository, false)
|
|
format_opt = wrapper_tag.merge(sanitize: false)
|
|
base64_encoded_imgs = options.fetch(:base64_encoded_imgs, false)
|
|
text = sanitize_input(text, tags)
|
|
text = simple_format(text, {}, format_opt) if simple_f
|
|
if text =~ SmartAnnotations::TagToHtml::USER_REGEX || text =~ SmartAnnotations::TagToHtml::REGEX
|
|
text = smart_annotation_parser(text, team, base64_encoded_imgs, preview_repository)
|
|
end
|
|
auto_link(
|
|
text,
|
|
html: { target: '_blank' },
|
|
link: :urls,
|
|
sanitize: false
|
|
).html_safe
|
|
end
|
|
end
|