retrospring/config/initializers/sanitize.rb
2021-12-31 22:40:38 +01:00

9 lines
No EOL
227 B
Ruby

EVIL_TAGS = {
elements: %w(blockquote a p i strong em del pre code table tr td th br ul ol li hr),
attributes: {
'a' => %w(href target rel)
},
protocols: {
'a' => { 'href' => ['http', 'https', :relative] }
}
}