cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

More fixes to the changeset viewer, including logged-in-ness on per-user edit lists, fix XSS potential on usernames here, and general tidyups.

Browse source
This commit is contained in:
Thomas Wood 2009-03-23 19:40:33 +00:00
parent 677f391ec1
commit 7d3a5899c9
3 changed files with 32 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

14
app/views/changeset/_changeset.rhtml
View file

@ -9,13 +9,13 @@
<% else %><%= changeset.closed_at.strftime("%d %b %Y %H:%M") %><% end %>
<%if showusername==true %>
<td class="<%= cl %>">
<% if changeset.user.data_public? %>
<%= link_to h(changeset.user.display_name), :controller => "user", :action => "view", :display_name => changeset.user.display_name %>
<% else %>
<i>annon</i>
<% end %>
<%if showusername %>
<td class="<%= cl %>">
<% if changeset.user.data_public? %>
<%= link_to h(changeset.user.display_name), :controller => "user", :action => "view", :display_name => changeset.user.display_name %>
<% else %>
<i>Anonymous</i>
<% end %>
<% end %>
<td class="<%= cl %>">