From: Tom Hughes Date: Fri, 27 Oct 2023 16:46:58 +0000 (+0100) Subject: Use an HTML5 standards-compliant sanitizer X-Git-Tag: live~981^2~4 X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/64f2517426bec2691600e29909775a8abc792164?ds=sidebyside Use an HTML5 standards-compliant sanitizer --- diff --git a/config/initializers/new_framework_defaults_7_1.rb b/config/initializers/new_framework_defaults_7_1.rb index 25af2fbf8..fd42322cb 100644 --- a/config/initializers/new_framework_defaults_7_1.rb +++ b/config/initializers/new_framework_defaults_7_1.rb @@ -195,7 +195,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize # # In previous versions of Rails, Action View always used `Rails::HTML4::Sanitizer` as its vendor. # -# Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor +Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor # Configure Action Text to use an HTML5 standards-compliant sanitizer when it is supported on your # platform. @@ -205,7 +205,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize # # In previous versions of Rails, Action Text always used `Rails::HTML4::Sanitizer` as its vendor. # -# Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor +Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor # Configure the log level used by the DebugExceptions middleware when logging # uncaught exceptions during requests