diff options
author | Claire <claire.github-309c@sitedethib.com> | 2021-03-19 23:48:59 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-03-19 23:48:59 +0100 |
commit | 876840e9efceb4cde0af92e2a0f5d7afe906b5e9 (patch) | |
tree | b4fcc45528233c6dd77e445add41890be5c89193 /config/application.rb | |
parent | 051efed5edd544b4f88c63a1038274ae2db30038 (diff) |
Fix brakeman warning (#15870)
As far as I understand, the brakeman warning was a false-positive as `content_tag` properly escapes untrusted HTML. Furthermore, the interpolated string values are built from the “username” part of accounts, which is restricted to a small subset of ASCII that precludes any XML entity or HTML code. This proposed change should be functionally equivalent to the current code, however it is slightly more robust, it's more idiomatic, and Brakeman will stop complaining about it.
Diffstat (limited to 'config/application.rb')
0 files changed, 0 insertions, 0 deletions