defmodule Fields.HtmlBody do
@moduledoc """
An Ecto Type for bodies of html text.
Strips out all HTML script tags to avoid XSS but allows other basic HTML
elements to remain.
## Example
schema "article" do
field(:body, Fields.HtmlBody)
end
"""
use Ecto.Type
def type, do: :string
def cast(value) do
{:ok, to_string(value)}
end
def dump(value) do
{:ok, HtmlSanitizeEx.basic_html(value)}
end
def load(value) do
{:ok, value}
end
def input_type, do: :textarea
def embed_as(_), do: :self
def equal?(term1, term2), do: term1 == term2
end