DGNum/demarches-normaliennes
14
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

Commentaires: avoid xss injection

Browse source
This commit is contained in:
Simon Lehericey 2017-07-12 13:53:25 +02:00
parent 2e03f77e4d
commit 35affd69fc
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/views/dossiers/commentaires/_commentaire.html.haml
View file

@ -2,7 +2,7 @@
.comment-header
= commentaire.header
.content
= commentaire.body.html_safe
= sanitize(commentaire.body)
- if file = commentaire.piece_justificative
.file
= link_to file.content_url, class: 'link', target: '_blank' do