From dfe30e1fe0b95f53990ff63f4bbc1b86229704b7 Mon Sep 17 00:00:00 2001 From: Jakob Kramer Date: Sat, 11 Feb 2012 22:22:20 +0100 Subject: [PATCH] fix server-side markdownify to sanitize links --- app/helpers/markdownify_helper.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/helpers/markdownify_helper.rb b/app/helpers/markdownify_helper.rb index bcac67dab..8a1390884 100644 --- a/app/helpers/markdownify_helper.rb +++ b/app/helpers/markdownify_helper.rb @@ -19,6 +19,7 @@ module MarkdownifyHelper render_options[:filter_html] = true render_options[:hard_wrap] ||= true + render_options[:safe_links_only] = true # This ugly little hack basically means # "Give me the rawest contents of target available"