diff options
| author | erdgeist <erdgeist@erdgeist.org> | 2026-08-02 02:46:33 +0200 |
|---|---|---|
| committer | erdgeist <erdgeist@erdgeist.org> | 2026-08-02 02:46:33 +0200 |
| commit | 097a211bbe15127c36e93bde9c8ca2f112f7db0e (patch) | |
| tree | 633c431505aab80ca5c4062f46e4385374e96f8a /app | |
| parent | abae36bf850424845838ba784b40b2c609766391 (diff) | |
Let the sanitizer honour what the editor permits
Diffstat (limited to 'app')
| -rw-r--r-- | app/helpers/content_helper.rb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/app/helpers/content_helper.rb b/app/helpers/content_helper.rb index b2603481..c88267c3 100644 --- a/app/helpers/content_helper.rb +++ b/app/helpers/content_helper.rb | |||
| @@ -106,7 +106,8 @@ module ContentHelper | |||
| 106 | def aggregate? content | 106 | def aggregate? content |
| 107 | options = {} | 107 | options = {} |
| 108 | 108 | ||
| 109 | cccms_attributes = ActionView::Base.sanitized_allowed_attributes + ['lang'] | 109 | cccms_attributes = ActionView::Base.sanitized_allowed_attributes + |
| 110 | %w[lang target rel data-gallery] | ||
| 110 | 111 | ||
| 111 | begin | 112 | begin |
| 112 | if content =~ /\[aggregate([^\]]*)\]/ | 113 | if content =~ /\[aggregate([^\]]*)\]/ |