From 921151d0414512df79f0724e0a52af6ab96108d1 Mon Sep 17 00:00:00 2001
From: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Date: Wed, 3 Apr 2013 16:31:28 +0300
Subject: [PATCH] strip tags from user profile
---
app/controllers/profiles_controller.rb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/app/controllers/profiles_controller.rb b/app/controllers/profiles_controller.rb
index 6fa114a4194..f0d69f11184 100644
--- a/app/controllers/profiles_controller.rb
+++ b/app/controllers/profiles_controller.rb
@@ -75,7 +75,7 @@ class ProfilesController < ApplicationController
# validation for this fields
%w(name skype linkedin twitter bio).each do |attr|
value = user_attributes[attr]
- user_attributes[attr] = sanitize(value) if value.present?
+ user_attributes[attr] = sanitize(strip_tags(value)) if value.present?
end
user_attributes
--
GitLab