diff --git a/config/initializers/sanitizer.rb b/config/initializers/sanitizer.rb index 6d99f4042..46ca6ebd2 100644 --- a/config/initializers/sanitizer.rb +++ b/config/initializers/sanitizer.rb @@ -1 +1,10 @@ -Loofah::HTML5::WhiteList::ALLOWED_PROTOCOLS.merge(%w(message onenote)) +# From Loofah 2.3.0, we should use Loofah::HTML5::SafeList over +# Loofah::HTML5::WhiteList +safe_list = + if Loofah::HTML5.constants.include?(:SafeList) + Loofah::HTML5::SafeList + else + Loofah::HTML5::WhiteList + end + +safe_list::ALLOWED_PROTOCOLS.merge(%w(message onenote))