Allow "tel:" links

[DannyBen]

Hello,

Can we allow tel: links?
I believe it is somewhere in this neighborhood

(The below was copied verbatim from this rails-html-sanitizer issue)

Is it intentional that tel: links are not allowed? Seems like a harmless protocol that should be allowed

>> sanitize("<a href='http://123'>click</a>")
=> "<a href=\"http://123\">click</a>"
>> sanitize("<a href='tel:123'>click</a>")
=> "<a>click</a>"

As a workaround, I am currently using:

# config/initializers/sanitize.rb
Loofah::HTML5::WhiteList::ALLOWED_PROTOCOLS.add('tel')

As proposed by this StackOverflow answer

[abhayks1]

I also need this asap.
hope it can be added soon.

[abhayks1]

The workaround is not working for me on 'rails', '5.0' and ruby-2.3.0
Am I missing anthing?

[ryym]

This workaround works for me. Thanks!

• Ruby 2.4.2
• Rails 5.1.5

[vadimeremeev]

Created pull request #147

[caspark]

Per https://stackoverflow.com/q/1164004 , callto (which is supported) is a non-standard Skype thing.

So yes, it'd be great to have #147 merged.

[Ruekompa]

Works for me. Thank you!

• Ruby 2.5.3
• Rails 5.2.1

[flavorjones]

v2.3.0 has been released.