openstreetmap-website/app/views/users/_user.html.erb
Andy Allan 5aa255e13f Use _html suffix to avoid using raw when displaying translated strings
This is safer than raw, since any user input is still escaped.
2020-01-02 17:43:34 +01:00

25 lines
826 B
Text

<% cl = cycle("table0", "table1") %>
<tr class="<%= cl %>">
<td>
<%= user_thumbnail(user) %>
</td>
<td>
<p>
<% if user.creation_ip %>
<%= t "users.index.summary_html",
:name => link_to(h(user.display_name), user_path(user)),
:ip_address => link_to(user.creation_ip, :ip => user.creation_ip),
:date => l(user.creation_time, :format => :friendly) %>
<% else %>
<%= t "users.index.summary_no_ip_html",
:name => link_to(h(user.display_name), user_path(user)),
:date => l(user.creation_time, :format => :friendly) %>
<% end %>
</p>
<div class="richtext"><%= user.description.to_html %></div>
</td>
<td>
<%= check_box_tag "user_#{user.id}", "", false, :name => "user[#{user.id}]" %>
</td>
</tr>