From 66c4db866963be1195595d5a6cc5909f8feccff9 Mon Sep 17 00:00:00 2001
From: Eric Davis <edavis@littlestreamsoftware.com>
Date: Mon, 27 Jun 2011 15:20:15 -0700
Subject: [PATCH] [#490] Escape AuthSources in the list.

Contributed by MAEDA, Go
---
 app/views/auth_sources/index.html.erb | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/views/auth_sources/index.html.erb b/app/views/auth_sources/index.html.erb
index 5867be52..56906bd4 100644
--- a/app/views/auth_sources/index.html.erb
+++ b/app/views/auth_sources/index.html.erb
@@ -15,10 +15,10 @@
   <tbody>
 <% for source in @auth_sources %>
   <tr class="<%= cycle("odd", "even") %>">
-    <td><%= link_to source.name, :action => 'edit', :id => source%></td>
-    <td align="center"><%= source.auth_method_name %></td>
-    <td align="center"><%= source.host %></td>
-    <td align="center"><%= source.users.count %></td>
+    <td><%= link_to(h(source.name), :action => 'edit', :id => source)%></td>
+    <td align="center"><%= h source.auth_method_name %></td>
+    <td align="center"><%= h source.host %></td>
+    <td align="center"><%= h source.users.count %></td>
     <td class="buttons">
     	<%= link_to l(:button_test), :action => 'test_connection', :id => source %>
     	<%= link_to l(:button_delete), { :action => 'destroy', :id => source },