Use an HTML5 standards-compliant sanitizer

This commit is contained in:
Tom Hughes 2023-10-27 17:46:58 +01:00
parent 4c6a56d002
commit 64f2517426

View file

@ -195,7 +195,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize
#
# In previous versions of Rails, Action View always used `Rails::HTML4::Sanitizer` as its vendor.
#
# Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
Rails.application.config.action_view.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
# Configure Action Text to use an HTML5 standards-compliant sanitizer when it is supported on your
# platform.
@ -205,7 +205,7 @@ Rails.application.config.active_record.generate_secure_token_on = :initialize
#
# In previous versions of Rails, Action Text always used `Rails::HTML4::Sanitizer` as its vendor.
#
# Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
Rails.application.config.action_text.sanitizer_vendor = Rails::HTML::Sanitizer.best_supported_vendor
# Configure the log level used by the DebugExceptions middleware when logging
# uncaught exceptions during requests