Escape image urls in wiki formatted HTML text (#9245).

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@7570 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Etienne Massip 2011-10-03 21:45:17 +00:00
parent 0aa63a13bc
commit f1b4a561ba
1 changed files with 1 additions and 1 deletions

View File

@ -938,7 +938,7 @@ class RedCloth3 < String
stln,algn,atts,url,title,href,href_a1,href_a2 = $~[1..8]
htmlesc title
atts = pba( atts )
atts = " src=\"#{ url }\"#{ atts }"
atts = " src=\"#{ htmlesc url.dup }\"#{ atts }"
atts << " title=\"#{ title }\"" if title
atts << " alt=\"#{ title }\""
# size = @getimagesize($url);