* use h() on username to avoid XSS

[rails.git] / app / views / message / inbox.html.erb

diff --git a/app/views/message/inbox.html.erb b/app/views/message/inbox.html.erb
index e75d6c1ecb8e4700174ad26b759b370abc98cbb4..2a97b7bbd2d1f9d6ea782a61a646d7e4417b66da 100644 (file)
--- a/app/views/message/inbox.html.erb
+++ b/app/views/message/inbox.html.erb
@@ -11,6 +11,7 @@
         <th><%= t'message.inbox.date' %></th>
         <th></th>
         <th></th>
+        <th></th>
       </tr>
       <%= render :partial => "message_summary", :collection => @user.messages %>
     </table>