Redmine/app/views/my/page.rhtml
Jean-Philippe Lang 2b86ef8e28 various modifications to prevent xss
- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81
2006-12-17 08:10:18 +00:00

31 lines
855 B
Plaintext

<div class="contextual">
<%= link_to l(:label_personalize_page), :action => 'page_layout' %>
</div>
<h2><%=l(:label_my_page)%></h2>
<div id="list-top">
<% @blocks['top'].each do |b| %>
<div class="mypage-box">
<%= render :partial => "my/blocks/#{b}", :locals => { :user => @user } %>
</div>
<% end if @blocks['top'] %>
</div>
<div id="list-left" class="splitcontentleft">
<% @blocks['left'].each do |b| %>
<div class="mypage-box">
<%= render :partial => "my/blocks/#{b}", :locals => { :user => @user } %>
</div>
<% end if @blocks['left'] %>
</div>
<div id="list-right" class="splitcontentright">
<% @blocks['right'].each do |b| %>
<div class="mypage-box">
<%= render :partial => "my/blocks/#{b}", :locals => { :user => @user } %>
</div>
<% end if @blocks['right'] %>
</div>