[Fix #592] Convert html_safe to sanitize

2017-07-12 18:17:53 +02:00 · 2017-07-12 18:17:53 +02:00 · 4ae9d8ef0d
commit 4ae9d8ef0d
parent da7af28f9f
12 changed files with 17 additions and 15 deletions
--- a/app/views/users/description/champs/_render_list_champs.html.haml
+++ b/app/views/users/description/champs/_render_list_champs.html.haml
@ -60,4 +60,4 @@

          - unless champ.description.empty?
            %div{ id: "description_champs_#{champ.id}", class: ('help-block' unless champ.type_champ == 'engagement') }
-              = champ.description_with_links
+              = sanitize(champ.description_with_links, attributes: %w(href target))