iankelling.org
/
git
/
iankelling.org
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
use safe markdown for comments to prevent xss
[iankelling.org]
/
b.rb
diff --git
a/b.rb
b/b.rb
index 432bbc2b384572a85be34cf85d52009b8ef02269..b5e2aa91bb94782a20a18316717492f4d92cc626 100644
(file)
--- a/
b.rb
+++ b/
b.rb
@@
-126,7
+126,7
@@
EOF
end
def comment_html(comment, date)
end
def comment_html(comment, date)
- inner = Redcarpet::Markdown.new(Redcarpet::Render::
HTML
, fenced_code_blocks: true).render(<<EOF)
+ inner = Redcarpet::Markdown.new(Redcarpet::Render::
Safe
, fenced_code_blocks: true).render(<<EOF)
#{comment}
<span class="comment-date">#{Time.at(date).strftime("%b %-d '%y")}</span>
EOF
#{comment}
<span class="comment-date">#{Time.at(date).strftime("%b %-d '%y")}</span>
EOF