WhiteListSanitizer#sanitize does not work as expected

[rails]

WhiteListSanitizer#sanitize does not work as expected

[kaspth]

Can reproduce this with vanilla Nokogiri:

irb(main):002:0> Nokogiri::HTML::DocumentFragment.parse('one < two')
=> #<Nokogiri::HTML::DocumentFragment:0x3fe1c94a40e4 name="#document-fragment" children=[#<Nokogiri::XML::Text:0x3fe1c9420078 "one ">]>
irb(main):003:0> Nokogiri::HTML::DocumentFragment.parse('one < two').to_s
=> "one "

So let's pool resources on sparklemotion/nokogiri#1419 instead of filing 4 issues. Thanks! ❤️

[flavorjones]

Nokogiri is operating as expected here. Not sure there's anything anyone can do about invalid HTML being treated as invalid HTML by an HTML parser. Either avoid passing it into the HTML parser or else escape entities first.