From ac001d2af4c249435cad3b1c7b0223a20b3bad2a Mon Sep 17 00:00:00 2001 From: Leandro Nunes dos Santos Date: Mon, 1 Sep 2014 16:29:51 -0300 Subject: [PATCH] put white_list on comment validation to avoid wrong parsers --- app/models/comment.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/models/comment.rb b/app/models/comment.rb index 9ad0c9a..674a2e7 100644 --- a/app/models/comment.rb +++ b/app/models/comment.rb @@ -46,7 +46,7 @@ class Comment < ActiveRecord::Base acts_as_having_settings :field => :setting - xss_terminate :only => [ :body, :title, :name ], :on => 'validation' + xss_terminate :only => [ :body, :title, :name ], :with => 'white_list', :on => 'validation' def comment_root (reply_of && reply_of.comment_root) || self -- libgit2 0.21.2