49 lines
1.8 KiB
Ruby
49 lines
1.8 KiB
Ruby
|
|
||
|
# content of this tags will also be removed
|
||
|
Rails.application.config.html_sanitizer_tags_remove_content = %w(
|
||
|
style
|
||
|
)
|
||
|
|
||
|
# only this tags are allowed
|
||
|
Rails.application.config.html_sanitizer_tags_whitelist = %w(
|
||
|
a abbr acronym address area article aside audio
|
||
|
b bdi bdo big blockquote br
|
||
|
canvas caption center cite code col colgroup command
|
||
|
datalist dd del details dfn dir div dl dt em
|
||
|
figcaption figure footer h1 h2 h3 h4 h5 h6 header hr
|
||
|
i img ins kbd label legend li map mark menu meter nav
|
||
|
ol output optgroup option p pre q
|
||
|
s samp section small span strike strong sub summary sup
|
||
|
text table tbody td tfoot th thead time tr tt u ul var video
|
||
|
)
|
||
|
|
||
|
# attributes allowed for tags
|
||
|
Rails.application.config.html_sanitizer_attributes_whitelist = {
|
||
|
:all => %w(class dir lang style title translate data-signature data-signature-id),
|
||
|
'a' => %w(href hreflang name rel),
|
||
|
'abbr' => %w(title),
|
||
|
'blockquote' => %w(cite),
|
||
|
'col' => %w(span width),
|
||
|
'colgroup' => %w(span width),
|
||
|
'data' => %w(value),
|
||
|
'del' => %w(cite datetime),
|
||
|
'dfn' => %w(title),
|
||
|
'img' => %w(align alt border height src srcset width),
|
||
|
'ins' => %w(cite datetime),
|
||
|
'li' => %w(value),
|
||
|
'ol' => %w(reversed start type),
|
||
|
'table' => %w(align bgcolor border cellpadding cellspacing frame rules sortable summary width),
|
||
|
'td' => %w(abbr align axis colspan headers rowspan valign width),
|
||
|
'th' => %w(abbr align axis colspan headers rowspan scope sorted valign width),
|
||
|
'ul' => %w(type),
|
||
|
'q' => %w(cite),
|
||
|
'time' => %w(datetime pubdate),
|
||
|
}
|
||
|
|
||
|
# only this css properties are allowed
|
||
|
Rails.application.config.html_sanitizer_css_properties_whitelist = %w(
|
||
|
width height
|
||
|
max-width min-width
|
||
|
max-height min-height
|
||
|
)
|