Andreas/tracks
1
0
Fork 0
mirror of https://github.com/TracksApp/tracks.git synced 2025-12-24 03:00:12 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Kill HTML tags in todo notes

Browse source 
We still want to preserve quotes for textile, but tags of any sort
shouldn't be able to mess up the output.

Fixes #765
This commit is contained in:
Eric Allen 2010-04-02 12:53:29 -04:00
parent e4394761c5
commit 8de74939ea
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
app/helpers/application_helper.rb
View file

@ -202,9 +202,11 @@ module ApplicationHelper
end
def format_note(note)
note.gsub!(/</, '&lt;') # eliminate tags
note.gsub!(/>/, '&gt;')
note = markdown(note)
note = auto_link_message(note)
note = auto_link(note)
note = markdown(note)
note = sanitize(note)
return note
end
end