diff --git a/app/assets/javascripts/application/plugins/ujs.js b/app/assets/javascripts/application/plugins/ujs.js new file mode 100644 index 0000000000000000000000000000000000000000..132a22b3e0745d916b8607664a26b0841464a491 --- /dev/null +++ b/app/assets/javascripts/application/plugins/ujs.js @@ -0,0 +1,13 @@ +/*global $, jQuery */ +/* This allow ujs requests to automatically inject nonce */ +$(function () { + 'use strict'; + $.ajaxSetup({ + converters: { + 'text script': function (text) { + jQuery.globalEval(text, { nonce: $('meta[name="csp-nonce"]').attr('content') }); + return text; + } + } + }); +}); \ No newline at end of file diff --git a/app/services/importers/cleaner.rb b/app/services/importers/cleaner.rb index ac6cf93f2d8dcd355cf3e7fbc41d31a2b7a3b9b2..62bf081d6f234852be97f4c611e1190589060af0 100644 --- a/app/services/importers/cleaner.rb +++ b/app/services/importers/cleaner.rb @@ -9,6 +9,7 @@ module Importers end def self.clean_string(string) + string = string.to_s string = string.gsub(' ', ' ') string = string.gsub('&', '&') string = ActionView::Base.full_sanitizer.sanitize string