Roman Rizzi df3eb93973
DEV: Sanitize HTML admin inputs (#14681)
* DEV: Sanitize HTML admin inputs

This PR adds on-save HTML sanitization for:

Client site settings
translation overrides
badges descriptions
user fields descriptions

I used Rails's SafeListSanitizer, which [accepts the following HTML tags and attributes](018cf54073/lib/rails/html/sanitizer.rb (L108))

* Make sure that the sanitization logic doesn't corrupt settings with special characters
2021-10-27 11:33:07 -03:00
..
2021-10-19 15:23:54 +02:00
2021-10-12 16:00:22 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-05-18 15:11:41 +02:00
2021-10-27 14:24:43 +02:00
2021-10-12 16:00:22 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-12 16:00:22 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-12 16:00:22 +02:00
2021-10-19 15:23:54 +02:00
2021-10-12 16:00:22 +02:00
2021-10-12 16:00:22 +02:00
2021-10-27 14:24:43 +02:00
2021-10-12 16:00:22 +02:00
2021-10-12 16:00:22 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-19 15:23:54 +02:00
2021-10-19 15:23:54 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-05 15:59:26 +02:00
2021-10-05 15:59:26 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2021-10-27 14:24:43 +02:00
2017-02-24 11:35:33 +01:00