diff --git a/app/models/enterprise.rb b/app/models/enterprise.rb
index fdad5f4814..4af0fa374e 100644
--- a/app/models/enterprise.rb
+++ b/app/models/enterprise.rb
@@ -247,6 +247,11 @@ class Enterprise < ApplicationRecord
count(distinct: true)
end
+ # Remove any unsupported HTML.
+ def long_description
+ HtmlSanitizer.sanitize(super)
+ end
+
# Remove any unsupported HTML.
def long_description=(html)
super(HtmlSanitizer.sanitize(html))
diff --git a/spec/models/enterprise_spec.rb b/spec/models/enterprise_spec.rb
index b853031c23..6b1fd9059c 100644
--- a/spec/models/enterprise_spec.rb
+++ b/spec/models/enterprise_spec.rb
@@ -403,6 +403,11 @@ RSpec.describe Enterprise do
subject.long_description = "Hello dearest monster."
expect(subject.long_description).to eq "Hello alert dearest monster."
end
+
+ it "sanitises existing HTML in long_description" do
+ subject[:long_description] = "Hello dearest monster."
+ expect(subject.long_description).to eq "Hello alert dearest monster."
+ end
end
describe "callbacks" do