fix: use correct tag for js

https://jira.railsc.ru/browse/GOODS-1246
abak-press · Apr 20, 2018 · ec43631 · ec43631
1 parent 65a6556
commit ec43631
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lib/string_tools.rb b/lib/string_tools.rb
@@ -137,7 +137,7 @@ def strip_all_tags_and_entities(string)
     #
     # Returns String
     def strip_tags_leave_br(string)
-      sanitized = Sanitize.fragment(string, remove_contents: %w(style javascript), elements: %w(p ul li br blockquote))
+      sanitized = Sanitize.fragment(string, remove_contents: %w(style script), elements: %w(p ul li br blockquote))
 
       sanitized.gsub!(/<(p|li|blockquote)[^>]*>/, '')
       sanitized.gsub!(%r{<(br /|ul[^>]*|/[^>]*)>}, '<br />')
@@ -182,7 +182,7 @@ def sanitize(str, attrs = {})
           :attributes => attributes,
           :elements => elements,
           :css => {:properties => Sanitize::Config::RELAXED[:css][:properties]},
-          :remove_contents => %w(style javascript),
+          :remove_contents => %w(style script),
           :allow_comments => false,
           :transformers => transformers
         )

diff --git a/spec/string_tools_spec.rb b/spec/string_tools_spec.rb
@@ -10,7 +10,7 @@
     end
 
     it 'removes javascript from string' do
-      sanitized_string = described_class.sanitize('test string<javascript>alert("ALERT");</javascript>' )
+      sanitized_string = described_class.sanitize('test string<script>alert("ALERT");</script>')
       expect(sanitized_string).to eq 'test string'
     end