lib/banzai/pipeline/description_pipeline.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

module Banzai
  module Pipeline
    class DescriptionPipeline < FullPipeline
      def self.transform_context(context)
        super(context).merge(
          # SanitizationFilter
          whitelist: whitelist
        )
      end

      private

      def self.whitelist
        # Descriptions are more heavily sanitized, allowing only a few elements.
        # See http://git.io/vkuAN
        whitelist = Banzai::Filter::SanitizationFilter::LIMITED
        whitelist[:elements] -= %w(pre code img ol ul li)

        whitelist
      end
    end
  end
end