cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

title/heading & XSS fix for /edit

Browse source
This commit is contained in:
Ævar Arnfjörð Bjarmason 2009-10-01 19:45:36 +00:00
parent c6f844603d
commit 1cea0df3d8
2 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
app/views/user_blocks/edit.html.erb
View file

@ -1,4 +1,8 @@
<h1><%= t('user_block.edit.title', :name => @user_block.user.display_name) %></h1>
<% @title = t 'user_block.edit.title', :name => h(@user_block.user.display_name) %>
<h1><%= t('user_block.edit.title',
:name => link_to(
h(@user_block.user.display_name),
{:controller => 'user', :action => 'view', :display_name => @user_block.user.display_name})) %></h1>
<% form_for(@user_block) do |f| %>
<%= f.error_messages %>