Use an HTML5 standards-compliant sanitizer
This commit is contained in:
parent
4c6a56d002
commit
64f2517426
1 changed files with 2 additions and 2 deletions
|
@ -195,7 +195,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize
|
||||||
#
|
#
|
||||||
# In previous versions of Rails, Action View always used `Rails::HTML4::Sanitizer` as its vendor.
|
# In previous versions of Rails, Action View always used `Rails::HTML4::Sanitizer` as its vendor.
|
||||||
#
|
#
|
||||||
# Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
|
Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
|
||||||
|
|
||||||
# Configure Action Text to use an HTML5 standards-compliant sanitizer when it is supported on your
|
# Configure Action Text to use an HTML5 standards-compliant sanitizer when it is supported on your
|
||||||
# platform.
|
# platform.
|
||||||
|
@ -205,7 +205,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize
|
||||||
#
|
#
|
||||||
# In previous versions of Rails, Action Text always used `Rails::HTML4::Sanitizer` as its vendor.
|
# In previous versions of Rails, Action Text always used `Rails::HTML4::Sanitizer` as its vendor.
|
||||||
#
|
#
|
||||||
# Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
|
Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
|
||||||
|
|
||||||
# Configure the log level used by the DebugExceptions middleware when logging
|
# Configure the log level used by the DebugExceptions middleware when logging
|
||||||
# uncaught exceptions during requests
|
# uncaught exceptions during requests
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue