Comment on Multiple security vulnerabilities in RailsparentComments−ryanlol10yAbsolutely, bbcode and markdown processing are significantly better alternatives.Also, I'm pretty sure you're specifically supposed to use rails-html-sanitizer with a whitelist. (See: Rails::Html::WhiteListSanitizer)
Comments
Absolutely, bbcode and markdown processing are significantly better alternatives.
Also, I'm pretty sure you're specifically supposed to use rails-html-sanitizer with a whitelist. (See: Rails::Html::WhiteListSanitizer)