cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Avoid calling raw in plain text email templates

Browse source 
Rails doesn't escape text in text/plain outputs, since before Rails 4.

See https://github.com/rails/rails/pull/8235
This commit is contained in:
Andy Allan 2020-11-25 14:37:38 +00:00
parent 342e25dd5a
commit cc1d9592df
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/views/user_mailer/diary_comment_notification.text.erb
View file

@ -3,7 +3,7 @@
<%= t '.header', :from_user => @from_user, :subject => @title %>
==
<%= raw @text.to_text %>
<%= @text.to_text %>
==
<%= t '.footer', :readurl => @readurl, :commenturl => @commenturl, :replyurl => @replyurl %>

6
app/views/user_mailer/message_notification.text.erb
View file

@ -1,9 +1,9 @@
<%= raw t '.hi', :to_user => @to_user %>
<%= t '.hi', :to_user => @to_user %>
<%= raw t '.header', :from_user => @from_user, :subject => @title %>
<%= t '.header', :from_user => @from_user, :subject => @title %>
==
<%= raw @text.to_text %>
<%= @text.to_text %>
==
<%= word_wrap(t '.footer_html', :readurl => @readurl, :replyurl => @replyurl) %>