Yet more escaping.
This commit is contained in:
parent
c5f93e3ea0
commit
789c6343d9
4 changed files with 8 additions and 8 deletions
|
@ -1,4 +1,4 @@
|
|||
<h2><%= @title %></h2>
|
||||
<h2><%= h(@title) %></h2>
|
||||
|
||||
<img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
|
||||
|
||||
|
@ -24,7 +24,7 @@
|
|||
<% end %>
|
||||
<tr>
|
||||
<td>Owner:</td>
|
||||
<td><%= link_to @trace.user.display_name, {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
|
||||
<td><%= link_to h(@trace.user.display_name), {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Description:</td>
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue