From 7127d6c5f8ceb03ec5008a17d320f8054f3e2edb Mon Sep 17 00:00:00 2001 From: Lucas Di Pentima Date: Mon, 26 Nov 2018 16:42:11 -0300 Subject: [PATCH 1/1] 14519: Adds more table related tags to the whitelist Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima --- apps/workbench/app/helpers/application_helper.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/workbench/app/helpers/application_helper.rb b/apps/workbench/app/helpers/application_helper.rb index 379eb64244..c4a801d68b 100644 --- a/apps/workbench/app/helpers/application_helper.rb +++ b/apps/workbench/app/helpers/application_helper.rb @@ -16,8 +16,8 @@ module ApplicationHelper end def render_markup(markup) - allowed_tags = Rails::Html::Sanitizer.white_list_sanitizer.allowed_tags + %w(table tbody th tr td) - sanitize(raw(RedCloth.new(markup.to_s).to_html(:refs_arvados, :textile)), tags: allowed_tags) + allowed_tags = Rails::Html::Sanitizer.white_list_sanitizer.allowed_tags + %w(table tbody th tr td col colgroup caption thead tfoot) + sanitize(raw(RedCloth.new(markup.to_s).to_html(:refs_arvados, :textile)), tags: allowed_tags) if markup end def human_readable_bytes_html(n) -- 2.30.2