Whitelist the <abbr> tag

thredded · Mar 29, 2017 · 2d29ef2 · 2d29ef2
1 parent 9ec1013
commit 2d29ef2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/thredded/content_formatter.rb b/lib/thredded/content_formatter.rb
@@ -6,7 +6,7 @@ class ContentFormatter
     mattr_accessor :whitelist
 
     self.whitelist = HTML::Pipeline::SanitizationFilter::WHITELIST.deep_merge(
-      elements: HTML::Pipeline::SanitizationFilter::WHITELIST[:elements] + %w(iframe span figure figcaption),
+      elements: HTML::Pipeline::SanitizationFilter::WHITELIST[:elements] + %w(abbr iframe span figure figcaption),
       transformers: HTML::Pipeline::SanitizationFilter::WHITELIST[:transformers] + [
         lambda do |env|
           next unless env[:node_name] == 'a'
@@ -20,6 +20,7 @@ class ContentFormatter
       ],
       attributes: {
         'a'      => %w(href rel),
+        'abbr'   => %w(title),
         'span'   => %w(class),
         'div'    => %w(class)
       }