Merge pull request #2341 from jyruzicka/update-loofah-methods

Use Loofah::HTML5::SafeList where possible
TracksApp · Feb 10, 2020 · 0f113ca · 0f113ca
2 parents 6fd92bb + 7269758
commit 0f113ca
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/config/initializers/sanitizer.rb b/config/initializers/sanitizer.rb
@@ -1 +1,10 @@
-Loofah::HTML5::WhiteList::ALLOWED_PROTOCOLS.merge(%w(message onenote))
+# From Loofah 2.3.0, we should use Loofah::HTML5::SafeList over
+# Loofah::HTML5::WhiteList
+safe_list =
+  if Loofah::HTML5.constants.include?(:SafeList)
+    Loofah::HTML5::SafeList
+  else
+    Loofah::HTML5::WhiteList
+  end
+
+safe_list::ALLOWED_PROTOCOLS.merge(%w(message onenote))