Download as
Browse Code »

Commit eb8d2df06a7cc2ccff3132643e84588b80546076

Authored by Braulio Bhavamitra
1 parent f1b53f69
Exists in master and in 20 other branches add_member_task_reject_details, admin_visible_profile, community_notifications, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, organization_ratings_improvements, profile_api_improvements, ratings_minor_fixes, send_email_to_admins, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

rails4: use new sanitizer

Showing 2 changed files with 5 additions and 3 deletions   Show diff stats
plugins/comment_group/lib/comment_group_plugin/macros/allow_comment.rb
  Diff comments   View file @eb8d2df
1 -#FIXME See a better way to generalize this parameter.  
2 -ActionView::Base.sanitized_allowed_attributes += ['data-macro', 'data-macro-group_id'] 1 +# FIXME See a better way to generalize this parameter.
  2 +Loofah::HTML5::WhiteList::ALLOWED_ATTRIBUTES.merge %w[data-macro data-macro-group_id]
3 3
4 class CommentGroupPlugin::AllowComment < Noosfero::Plugin::Macro 4 class CommentGroupPlugin::AllowComment < Noosfero::Plugin::Macro
  5 +
5 def self.configuration 6 def self.configuration
6 { :params => [], 7 { :params => [],
7 :skip_dialog => true, 8 :skip_dialog => true,
plugins/variables/lib/variables_plugin/macros/profile.rb
  Diff comments   View file @eb8d2df
1 -ActionView::Base.sanitized_allowed_attributes += ['data-macro'] 1 +# FIXME See a better way to generalize this parameter.
  2 +Loofah::HTML5::WhiteList::ALLOWED_ATTRIBUTES.merge %w[data-macro]
2 3
3 class VariablesPlugin::Profile < Noosfero::Plugin::Macro 4 class VariablesPlugin::Profile < Noosfero::Plugin::Macro
4 5