Skip to content

Conversation

rsmithlal
Copy link
Member

Summary

  • sanitize HTML block content using centralized helper
  • add helper with allowlist of permitted tags and attributes, including YouTube iframes
  • test helper to ensure dangerous markup is stripped and safe markup remains, allowing only YouTube embeds

Testing

  • bundle exec rubocop (fails: command not found: rubocop)
  • bundle exec brakeman -q -w2 (fails: command not found: brakeman)
  • bundle exec bundler-audit --update (fails: command not found: bundler-audit)
  • bin/codex_style_guard (fails: command not found: rubocop)
  • bin/ci (fails: command not found: rails)

https://chatgpt.com/codex/tasks/task_e_689a50b4a2e08321910a06221f1e2540

## Summary
- Correct ContentHelper spec to expect unescaped anchor tag attributes
in safe_html

## Testing
- `bin/ci` *(fails: bundler: command not found: rails)*
- `bundle exec rubocop` *(fails: bundler: command not found: rubocop)*
- `bundle exec brakeman -q -w2` *(fails: bundler: command not found:
brakeman)*
- `bundle exec bundler-audit --update` *(fails: bundler: command not
found: bundler-audit)*
- `bin/codex_style_guard` *(fails: bundler: command not found: rubocop)*

------
https://chatgpt.com/codex/tasks/task_e_689b7397cf9083219a36487ec4f9b6dd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant