From b26ec76fabd5ef496880020270c32ba5a0ee1dec Mon Sep 17 00:00:00 2001
From: ArtOfCode- <hello@artofcode.co.uk>
Date: Wed, 3 Jun 2020 02:23:55 +0100
Subject: [PATCH] Allow custom HTML
---
app/helpers/application_helper.rb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index 348d956b5..78fdcce45 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -58,7 +58,7 @@ module ApplicationHelper
def render_markdown(markdown)
CommonMarker.render_doc(markdown,
[:FOOTNOTES, :LIBERAL_HTML_TAG, :STRIKETHROUGH_DOUBLE_TILDE],
- [:table, :strikethrough, :autolink]).to_html
+ [:table, :strikethrough, :autolink]).to_html(:UNSAFE)
end
# This isn't a perfect way to strip out Markdown, so it should only be used for non-critical things like
--
GitLab