From 414388b94ffe00f4c2e8e926b3c581347fe369d1 Mon Sep 17 00:00:00 2001 From: Robin Ward Date: Thu, 11 Aug 2016 14:59:20 -0400 Subject: [PATCH] FIX: Allow disabling of sanitization (for email customiaztions) --- lib/pretty_text.rb | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/lib/pretty_text.rb b/lib/pretty_text.rb index 66792e18d8f..c31285cd8c1 100644 --- a/lib/pretty_text.rb +++ b/lib/pretty_text.rb @@ -156,7 +156,14 @@ module PrettyText Emoji.custom.map {|e| custom_emoji[e.name] = e.url} context.eval("__optInput.customEmoji = #{custom_emoji.to_json};") - opts = context.eval("__pt = new __PrettyText(__buildOptions(__optInput));") + context.eval('__textOptions = __buildOptions(__optInput);') + + # Be careful disabling sanitization. We allow for custom emails + if opts[:sanitize] == false + context.eval('__textOptions.sanitize = false;') + end + + opts = context.eval("__pt = new __PrettyText(__textOptions);") DiscourseEvent.trigger(:markdown_context, context) baked = context.eval("__pt.cook(#{text.inspect})")