Comments on: The new HTML sanitizer in Rails 4.2

By: Yorick

Yorick — Wed, 20 Aug 2014 15:20:00 +0000

Is this meant to be working in rails 4.2? I tried calling sanitize but i think it still calls the old deprecated sanitizer. If you look here (https://github.com/rails/rails-html-sanitizer/blob/master/lib/rails-html-sanitizer.rb#L33) it tries to override sanitizer_vendor but this method lives in the ClassMethods module so it has no effect.

By: Rafael Mendonça França

Rafael Mendonça França — Mon, 18 Aug 2014 23:43:00 +0000

In reply to Mark Nadig. This seems a cool project. Maybe we will have an adapter for it on Rails later.

By: Mark Nadig

Mark Nadig — Mon, 18 Aug 2014 23:40:00 +0000

Just saw this today, https://github.com/rgrove/sanitize/blob/master/COMPARISON.md any thoughts?

By: Rafael Mendonça França

Rafael Mendonça França — Wed, 30 Jul 2014 16:31:00 +0000

In reply to Isaac Andrade. It should be. The Public API is the same and the result in most case are also the same.

By: Isaac Andrade

Isaac Andrade — Wed, 30 Jul 2014 15:21:00 +0000

Is the change compatible with Rails 4.1?

By: Rafael Mendonça França

Rafael Mendonça França — Mon, 28 Jul 2014 14:51:00 +0000

In reply to Micah Geisel. We do avoid adding native dependencies on the Rails framework but for his case we chose to use they because Nokogiri bundle the dependencies inside the gem and it also already has binary distributions to JRuby and Windows platforms. The easy to start / development workflow should not change.