HTML escape at app/views/attachments/file.rhtml.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6362 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
parent
500b29d84c
commit
7d2098bc22
@ -2,7 +2,7 @@
|
||||
|
||||
<div class="attachments">
|
||||
<p><%= h("#{@attachment.description} - ") unless @attachment.description.blank? %>
|
||||
<span class="author"><%= @attachment.author %>, <%= format_time(@attachment.created_on) %></span></p>
|
||||
<span class="author"><%= link_to_user(@attachment.author) %>, <%= format_time(@attachment.created_on) %></span></p>
|
||||
<p><%= link_to_attachment @attachment, :text => l(:button_download), :download => true -%>
|
||||
<span class="size">(<%= number_to_human_size @attachment.filesize %>)</span></p>
|
||||
|
||||
@ -10,7 +10,7 @@
|
||||
|
||||
<%= render :partial => 'common/file', :locals => {:content => @content, :filename => @attachment.filename} %>
|
||||
|
||||
<% html_title @attachment.filename %>
|
||||
<% html_title h(@attachment.filename) %>
|
||||
|
||||
<% content_for :header_tags do -%>
|
||||
<%= stylesheet_link_tag "scm" -%>
|
||||
|
Loading…
x
Reference in New Issue
Block a user