From 6408cddc40e750c2b8f6e6d62b37ce55eba2695d Mon Sep 17 00:00:00 2001 From: Gregor Schmidt Date: Wed, 4 May 2011 19:28:24 +0200 Subject: [PATCH] [#374] Not escaping URLs since they are used in a safe CDATA section, where no entity encoding is needed. --- app/views/issue_relations/_form.rhtml | 2 +- app/views/issues/_form.rhtml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/app/views/issue_relations/_form.rhtml b/app/views/issue_relations/_form.rhtml index fdf0582f..4f955ac4 100644 --- a/app/views/issue_relations/_form.rhtml +++ b/app/views/issue_relations/_form.rhtml @@ -3,7 +3,7 @@

<%= f.select :relation_type, collection_for_relation_type_select, {}, :onchange => "setPredecessorFieldsVisibility();" %> <%= l(:label_issue) %> #<%= f.text_field :issue_to_id, :size => 10 %>

-<%= javascript_tag "observeRelatedIssueField('#{auto_complete_issues_path(:id => @issue, :project_id => @project) }')" %> +<%= javascript_tag "observeRelatedIssueField('#{auto_complete_issues_path(:id => @issue, :project_id => @project, :escape => false) }')" %> diff --git a/app/views/issues/_form.rhtml b/app/views/issues/_form.rhtml index 2f4996a9..2c78cc46 100644 --- a/app/views/issues/_form.rhtml +++ b/app/views/issues/_form.rhtml @@ -11,7 +11,7 @@ <% if User.current.allowed_to?(:manage_subtasks, @project) %>

<%= f.text_field :parent_issue_id, :size => 10 %>

-<%= javascript_tag "observeParentIssueField('#{auto_complete_issues_path(:id => @issue, :project_id => @project) }')" %> +<%= javascript_tag "observeParentIssueField('#{auto_complete_issues_path(:id => @issue, :project_id => @project, :escape => false) }')" %> <% end %>

<%= f.text_area :description,