Sutty/panel
5
0
Fork 0
mirror of https://0xacab.org/sutty/sutty synced 2024-11-16 22:56:22 +00:00
Code Issues Projects Releases Wiki Activity

fix: usar HTML5

Browse source
This commit is contained in:
f 2023-02-01 17:51:30 -03:00
parent 4e4091f6c9
commit d095dbcc14
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/models/metadata_content.rb
View file

@ -24,7 +24,7 @@ class MetadataContent < MetadataTemplate
end end
def to_s def to_s
Nokogiri::HTML.fragment(value).tap do |html| Nokogiri::HTML5.fragment(value).tap do |html|
html.css('[src^="public/"]').each do |element| html.css('[src^="public/"]').each do |element|
element['src'] = convert_internal_path_to_src element['src'] element['src'] = convert_internal_path_to_src element['src']
end end
@ -46,7 +46,7 @@ class MetadataContent < MetadataTemplate
# TODO: En lugar de comprobar el Content Type acá, restringir los # TODO: En lugar de comprobar el Content Type acá, restringir los
# tipos de archivo a aceptar en ActiveStorage. # tipos de archivo a aceptar en ActiveStorage.
def sanitize(html_string) def sanitize(html_string)
html = Nokogiri::HTML.fragment(super html_string) html = Nokogiri::HTML5.fragment(super html_string)
elements = 'img,audio,video,iframe' elements = 'img,audio,video,iframe'
# Eliminar elementos sin src y comprobar su origen # Eliminar elementos sin src y comprobar su origen