- <%= f.label :reason, t('user_block.edit.reason', :name => @user_block.user.display_name) %><br />
- <%= f.text_area :reason %>
+ <%= f.label :reason, t('user_block.edit.reason', :name => h(@user_block.user.display_name)) %><br />
+ <%= f.text_area :reason, :cols => 80, :rows => 5 %>