Make notification description support HTML element

[ci skip]
expertiza · Aug 8, 2019 · 783cbf9 · 783cbf9
1 parent fbef3bd
commit 783cbf9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/app/controllers/notifications_controller.rb b/app/controllers/notifications_controller.rb
@@ -36,8 +36,7 @@ def edit; end
 
   # POST /notifications
   def create
-    if params[:notification] && (warn_for_special_chars(params[:notification][:subject], "Subject") ||
-        warn_for_special_chars(params[:notification][:description], "Description"))
+    if params[:notification]
       redirect_back
       return
     end

diff --git a/app/views/shared/_flash_notifications.html.erb b/app/views/shared/_flash_notifications.html.erb
@@ -10,10 +10,10 @@
         <table style="width: 100%">
           <tbody class="flash_notification alert alert-success">
             <tr style="border-style: none none solid none; border-width: 1px;">
-              <td><b><%= notification.subject.upcase %></b></td>
+              <td><b><%= sanitize notification.subject.upcase %></b></td>
               <td><%= link_to image_tag("/assets/tree_view/delete-icon-24.png", border: 0, height: '16', width: '16', align: 'right'), track_notifications_path(id: notification.id), {class: 'dock-item'} %> </td>
             </tr>
-            <tr><td><%= notification.description %></td><td></td></tr>
+            <tr><td><%= sanitize notification.description.html_safe %></td><td></td></tr>
           </tbody>
         </table>
       <% end %>