Merge remote-tracking branch 'upstream/pull/3049'

[rails.git] / config / initializers / sanitize.rb

diff --git a/config/initializers/sanitize.rb b/config/initializers/sanitize.rb
index 240f1e315e404a24665f92d77c5e30e2b78bc195..6f2e30852029f17d0deafa615b4068daf540d9c3 100644 (file)
--- a/config/initializers/sanitize.rb
+++ b/config/initializers/sanitize.rb
@@ -1,5 +1,8 @@
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 
 Sanitize::Config::OSM[:elements] -= %w[div style]
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 
 Sanitize::Config::OSM[:elements] -= %w[div style]

-Sanitize::Config::OSM[:add_attributes] = { "a" => { "rel" => "nofollow" } }
+Sanitize::Config::OSM[:add_attributes] = { "a" => { "rel" => "nofollow noopener noreferrer" } }

 Sanitize::Config::OSM[:remove_contents] = %w[script style]
 Sanitize::Config::OSM[:remove_contents] = %w[script style]

+Sanitize::Config::OSM[:transformers] = lambda do |env|
+  env[:node].add_class("table table-sm w-auto") if env[:node_name] == "table"
+end