app/models/bit_player/slide.rb in bit_player-0.1.2 vs app/models/bit_player/slide.rb in bit_player-0.1.3

@@ -13,14 +13,20 @@
 
     def render_body
       rendered = ""
 
       if !body.nil?
-        markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML, space_after_headers: true)
-        rendered += markdown.render(body).html_safe
+        markdown = Redcarpet::Markdown.new(
+          Redcarpet::Render::HTML.new(
+            filter_html: true,
+            safe_links_only: true
+          ),
+          space_after_headers: true,
+        )
+        rendered += markdown.render(body)
       end
 
-      rendered
+      rendered.html_safe
     end
 
     def self.update_positions(ids)
       transaction do
         connection.execute "SET CONSTRAINTS slide_position DEFERRED"