defunkt / acts_as_textiled fork watch download tarball
public
Description: Makes your models act as textiled.
Homepage: http://errtheblog.com/posts/12-actsastextiled
Clone URL: git://github.com/defunkt/acts_as_textiled.git

Comments for defunkt's acts_as_textiled   feed

lawrencepit commented on defunkt/acts_as_textiled 15 days ago
Comment in 8dd4a0f:

That wasn’t correct no. However, redcloth doesn’t handle security concerns imo, for example it outputs javascript input without escaping it.
I had reverted the above a few months ago btw. See:
http://github.com/lawrencepit/acts_as_textiled/commit/7725bcca691b13eb77cbdbdb441789a27ef2de63

sandro commented on defunkt/acts_as_textiled about 1 month ago
Comment in 8dd4a0f:

Whoops, forgot to escape my textie
<code>h2. 15. \"Privacy\":http://mysite.com/about/privacy/</code>

sandro commented on defunkt/acts_as_textiled about 1 month ago
Comment in 8dd4a0f:
WHY?
This change broke the textile below:

15. "Privacy":http://mysite.com/about/privacy/
Is there any good reason for escaping before going through redcloth? Redcloth can handle security concerns on its own.

tekin commented on defunkt/acts_as_textiled 2 months ago
Comment on init.rb L3 in 572cc43:

I’ve just installed RedCloth 4.0 and my app falls over at this line with a "RedCloth is not a module" error. Changing it to:
<code>
require ‘redcloth’
</code>
stops the error.