HTML escape at app/views/documents/show.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6367 e93f8b46-1217-0410-a6f0-8f06a7374b81
2011-08-02 13:01:40 +00:00 · 2011-08-02 13:01:40 +00:00 · a2f2592fe1
parent 1e0f514637
commit a2f2592fe1
1 changed files with 1 additions and 1 deletions
--- a/app/views/documents/show.rhtml
+++ b/app/views/documents/show.rhtml
@ -25,7 +25,7 @@
  <% end %> 
 <% end %>

-<% html_title @document.title -%>
+<% html_title h(@document.title) -%>

 <% content_for :header_tags do %>
    <%= stylesheet_link_tag 'scm' %>