Merge pull request #590 from sgmap/fix_injection

Fix injection
This commit is contained in:
LeSim 2017-07-12 15:13:29 +02:00 committed by GitHub
commit 77f5e761c4
2 changed files with 2 additions and 2 deletions

View file

@ -52,7 +52,7 @@
- elsif champ.decorate.value == 'false' - elsif champ.decorate.value == 'false'
Non Non
- else - else
= champ.decorate.value.html_safe = sanitize(champ.decorate.value)
- if @facade.dossier.mandataire_social && gestionnaire_signed_in? - if @facade.dossier.mandataire_social && gestionnaire_signed_in?
.mandataire_social.text-success.center .mandataire_social.text-success.center

View file

@ -2,7 +2,7 @@
.comment-header .comment-header
= commentaire.header = commentaire.header
.content .content
= commentaire.body.html_safe = sanitize(commentaire.body)
- if file = commentaire.piece_justificative - if file = commentaire.piece_justificative
.file .file
= link_to file.content_url, class: 'link', target: '_blank' do = link_to file.content_url, class: 'link', target: '_blank' do