Clarify comments

rgrove · Jan 11, 2021 · eaaaa9d · eaaaa9d
1 parent fac1a2e
commit eaaaa9d
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/lib/sanitize/transformers/clean_element.rb b/lib/sanitize/transformers/clean_element.rb
@@ -120,12 +120,10 @@ def call(env)
         attr_name = attr.name.downcase
 
         unless attr_allowlist.include?(attr_name)
-          # The attribute isn't allowed.
+          # The attribute isn't in the allowlist, but may still be allowed if
+          # it's a data attribute.
 
-          # Arbitrary data attributes are allowed. If this is a data
-          # attribute, continue.
-          unless allow_data_attributes && attr_name.start_with?('data-') &&
-            attr_name =~ REGEX_DATA_ATTR
+          unless allow_data_attributes && attr_name.start_with?('data-') && attr_name =~ REGEX_DATA_ATTR
             # Either the attribute isn't a data attribute or arbitrary data
             # attributes aren't allowed. Remove the attribute.
             attr.unlink