discourse/lib/onebox/discourse_onebox_sanitize_c...

# frozen_string_literal: true

module Onebox
  class DiscourseOneboxSanitizeConfig
    module Config
      DISCOURSE_ONEBOX ||=
        Sanitize::Config.freeze_config(
          Sanitize::Config.merge(
            Sanitize::Config::ONEBOX,
            attributes: Sanitize::Config.merge(
              Sanitize::Config::ONEBOX[:attributes],
              'aside' => [:data]
            )
          )
        )
    end
  end
end
DEV: enable frozen string literal on all files This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging 2019-05-02 18:17:27 -04:00			`# frozen_string_literal: true`

DEV: Upgrading Discourse to Zeitwerk (#8098) Zeitwerk simplifies working with dependencies in dev and makes it easier reloading class chains. We no longer need to use Rails "require_dependency" anywhere and instead can just use standard Ruby patterns to require files. This is a far reaching change and we expect some followups here. 2019-10-02 00:01:53 -04:00			`module Onebox`
			`class DiscourseOneboxSanitizeConfig`
			`module Config`
			`DISCOURSE_ONEBOX \|\|=`
			`Sanitize::Config.freeze_config(`
FEATURE: Add disable_onebox_media_download_controls hidden site setting (#12208) Uses discourse/onebox@ff9ec90 Adds a hidden site setting called disable_onebox_media_download_controls which will add controlslist="nodownload" to video and audio oneboxes, and also to the local video and audio oneboxes within Discourse. 2021-02-24 21:39:15 -05:00			`Sanitize::Config.merge(`
			`Sanitize::Config::ONEBOX,`
			`attributes: Sanitize::Config.merge(`
			`Sanitize::Config::ONEBOX[:attributes],`
			`'aside' => [:data]`
			`)`
			`)`
			`)`
DEV: Upgrading Discourse to Zeitwerk (#8098) Zeitwerk simplifies working with dependencies in dev and makes it easier reloading class chains. We no longer need to use Rails "require_dependency" anywhere and instead can just use standard Ruby patterns to require files. This is a far reaching change and we expect some followups here. 2019-10-02 00:01:53 -04:00			`end`
FIX: wasn't extracting links to quoted posts 2017-02-06 08:45:04 -05:00			`end`
			`end`