2014-12-28 10:06:04 -08:00
|
|
|
EVIL_TAGS = {
|
2014-12-28 10:12:28 -08:00
|
|
|
elements: %w(blockquote a p i strong em del pre code table tr td th br ul ol li hr),
|
2014-12-28 10:06:04 -08:00
|
|
|
attributes: {
|
2021-12-30 09:14:34 -08:00
|
|
|
'a' => %w(href target)
|
2014-12-28 10:06:04 -08:00
|
|
|
},
|
|
|
|
protocols: {
|
|
|
|
'a' => { 'href' => ['http', 'https', :relative] }
|
|
|
|
}
|
|
|
|
}
|