Update render_markdown to work without html_safe

2021-07-29 00:12:18 +02:00
parent 046cc4efc0
commit 9751d5a5a1
1 changed files with 1 additions and 3 deletions
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@ -42,9 +42,7 @@ module ApplicationHelper
  end

  def render_markdown(markdown)
-    # rubocop:disable Rails/OutputSafety
-    Kramdown::Document.new(markdown).to_html.html_safe
-    # rubocop:enable Rails/OutputSafety
+    sanitize Kramdown::Document.new(markdown).to_html
  end

  def row(options = {}, &block)