diff --git a/app/models/enterprise.rb b/app/models/enterprise.rb index fdad5f4814..4af0fa374e 100644 --- a/app/models/enterprise.rb +++ b/app/models/enterprise.rb @@ -247,6 +247,11 @@ class Enterprise < ApplicationRecord count(distinct: true) end + # Remove any unsupported HTML. + def long_description + HtmlSanitizer.sanitize(super) + end + # Remove any unsupported HTML. def long_description=(html) super(HtmlSanitizer.sanitize(html)) diff --git a/spec/models/enterprise_spec.rb b/spec/models/enterprise_spec.rb index b853031c23..6b1fd9059c 100644 --- a/spec/models/enterprise_spec.rb +++ b/spec/models/enterprise_spec.rb @@ -403,6 +403,11 @@ RSpec.describe Enterprise do subject.long_description = "Hello dearest monster." expect(subject.long_description).to eq "Hello alert dearest monster." end + + it "sanitises existing HTML in long_description" do + subject[:long_description] = "Hello dearest monster." + expect(subject.long_description).to eq "Hello alert dearest monster." + end end describe "callbacks" do