diff --git a/lib/gitlab/markdown.rb b/lib/gitlab/markdown.rb index 65dce9291e6c8ddd2247a7967c12b0e726bccdab..11da4be4022c80889362eb06ceaf1e63c64da742 100644 --- a/lib/gitlab/markdown.rb +++ b/lib/gitlab/markdown.rb @@ -89,6 +89,7 @@ module Gitlab whitelist = HTML::Pipeline::SanitizationFilter::WHITELIST whitelist[:attributes][:all].push('class', 'id') + whitelist[:elements].push('span') # Remove the rel attribute that the sanitize gem adds, and remove the # href attribute if it contains inline javascript @@ -123,7 +124,7 @@ module Gitlab text = parse_tasks(text) end - text + text.html_safe end private