From 4313b5ffc612f770aa283c55e87660d6bb90b41c Mon Sep 17 00:00:00 2001 From: Toshi MARUYAMA Date: Fri, 16 Sep 2011 01:51:50 +0000 Subject: [PATCH] HTML escape at parse_wiki_links() of app/helpers/application_helper.rb (#9252) git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@7248 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/helpers/application_helper.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb index 93f40e7f1..cd8c439fc 100644 --- a/app/helpers/application_helper.rb +++ b/app/helpers/application_helper.rb @@ -579,7 +579,7 @@ module ApplicationHelper wiki_page_id = page.present? ? Wiki.titleize(page) : nil url_for(:only_path => only_path, :controller => 'wiki', :action => 'show', :project_id => link_project, :id => wiki_page_id, :anchor => anchor) end - link_to((title || page), url, :class => ('wiki-page' + (wiki_page ? '' : ' new'))) + link_to(h(title || page), url, :class => ('wiki-page' + (wiki_page ? '' : ' new'))) else # project or wiki doesn't exist all.html_safe