Allow some basic HTML tags in story description

ice1080 · Nov 14, 2023 · b2847f2 · b2847f2
1 parent f682903
commit b2847f2
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/rails/app/javascript/components/Story.jsx b/rails/app/javascript/components/Story.jsx
@@ -50,7 +50,7 @@ const Story = props => {
             {story.title}
             {story.permission_level === "restricted" && " 🔒"}
           </h6>
-          <p className="description">{story.desc}</p>
+          <p className="description" dangerouslySetInnerHTML={{ __html: story.desc }}></p>
           {
             story.media &&
             story.media.map(file => (

diff --git a/rails/app/views/dashboard/stories/_stories.html.erb b/rails/app/views/dashboard/stories/_stories.html.erb
@@ -14,7 +14,7 @@
         <span class="badge badge-green"><%= Story.human_attribute_name("permission_level.#{story.permission_level}") %></span>
       <% end %>
 
-    <p><%= story.desc %></p>
+    <p><%= sanitize story.desc, tags: %w(strong em u) %></p>
     </div>
 
     <div>

diff --git a/rails/app/views/dashboard/stories/show.html.erb b/rails/app/views/dashboard/stories/show.html.erb
@@ -83,7 +83,7 @@
   </div>
 
   <div class="two-columns-left">
-    <p class="render-lines"><%= @story.desc %></p>
+    <p class="render-lines"><%= sanitize @story.desc, tags: %w(strong em u) %></p>
 
     <% @story.media.each do |media| %>
       <p class="media">