Sanitize home_page_alert_html

It still allows some specific tag so we can have link and some
formatting.
This commit is contained in:
Gaetan Craig-Riou
2023-11-13 15:39:08 +11:00
parent 84a8c6b31a
commit 031cc45992

View File

@@ -1,6 +1,6 @@
- if ContentConfig.home_page_alert_html.present?
.alert-cta
%h6= raw ContentConfig.home_page_alert_html
%h6= sanitize(@comment.body, tags: %w(strong em a i span), attributes: %w(href target))
- else
= render "shared/register_call"