optimize html sanitization

closes #70
diaspora · Dec 15, 2014 · 1d764d1 · 1d764d1
1 parent bac2dfe
commit 1d764d1
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/lib/planet/models/entry.rb b/lib/planet/models/entry.rb
@@ -7,10 +7,8 @@ class Entry < ActiveRecord::Base
 
       def sanitized_body
         Sanitize.fragment(self.body, Sanitize::Config.merge(
-          Sanitize::Config::RELAXED,
-          :add_attributes => {
-            'a' => {'rel' => 'nofollow'}
-          }
+          Sanitize::Config::BASIC,
+          :elements => Sanitize::Config::BASIC[:elements] + ['img', 'table']
         ))
       end
     end