From 64f2517426bec2691600e29909775a8abc792164 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 27 Oct 2023 17:46:58 +0100 Subject: [PATCH 1/1] Use an HTML5 standards-compliant sanitizer --- config/initializers/new_framework_defaults_7_1.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/initializers/new_framework_defaults_7_1.rb b/config/initializers/new_framework_defaults_7_1.rb index 25af2fbf8..fd42322cb 100644 --- a/config/initializers/new_framework_defaults_7_1.rb +++ b/config/initializers/new_framework_defaults_7_1.rb @@ -195,7 +195,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize # # In previous versions of Rails, Action View always used `Rails::HTML4::Sanitizer` as its vendor. # -# Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor +Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor # Configure Action Text to use an HTML5 standards-compliant sanitizer when it is supported on your # platform. @@ -205,7 +205,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize # # In previous versions of Rails, Action Text always used `Rails::HTML4::Sanitizer` as its vendor. # -# Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor +Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor # Configure the log level used by the DebugExceptions middleware when logging # uncaught exceptions during requests -- 2.39.5