Sanitize part.body in page_part_field partial.

EnotionZ · Aug 9, 2012 · c144f7f · c144f7f
1 parent 9310913
commit c144f7f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pages/app/views/refinery/admin/pages/_page_part_field.html.erb b/pages/app/views/refinery/admin/pages/_page_part_field.html.erb
@@ -1,5 +1,5 @@
 <div class='page_part' id='<%= new_part ? "page_part_new_#{part_index}" : part.to_param %>'>
   <%= hidden_field_tag "page[parts_attributes][#{part_index}][title]", part.title if new_part %>
-  <%= text_area_tag "page[parts_attributes][#{part_index}][body]", part.body, :rows => 20, :class => 'wymeditor widest' %>
+  <%= text_area_tag "page[parts_attributes][#{part_index}][body]", sanitize(part.body), :rows => 20, :class => 'wymeditor widest' %>
   <%= hidden_field_tag "page[parts_attributes][#{part_index}][position]", part_index %>
 </div>