Avoid mass assignment error in spam observer

[rails.git] / app / views / user_blocks / edit.html.erb

diff --git a/app/views/user_blocks/edit.html.erb b/app/views/user_blocks/edit.html.erb
index c3111367dd4d7fe11a9b83f8768aba17aeb0d0f2..a50ac75d7616c6ddb9c693cdbb6a65d90cf2f6e8 100644 (file)
--- a/app/views/user_blocks/edit.html.erb
+++ b/app/views/user_blocks/edit.html.erb
@@ -1,11 +1,15 @@
-<h1><%= t('user_block.edit.title', :name => @user_block.user.display_name) %></h1>
+<% @title = t 'user_block.edit.title', :name => h(@user_block.user.display_name) %>
+<h1><%= raw t('user_block.edit.title',
+              :name => link_to(
+                               h(@user_block.user.display_name),
+                               {:controller => 'user', :action => 'view', :display_name => @user_block.user.display_name})) %></h1>

 
 

-<% form_for(@user_block) do |f| %>
+<%= form_for(@user_block) do |f| %>

   <%= f.error_messages %>
 
   <p>
   <%= f.error_messages %>
 
   <p>

-    <%= f.label :reason, t('user_block.edit.reason', :name => @user_block.user.display_name) %><br />
-    <%= f.text_area :reason %>
+    <%= f.label :reason, t('user_block.edit.reason', :name => h(@user_block.user.display_name)) %><br />
+    <%= f.text_area :reason, :cols => 80, :rows => 5 %>

   </p>
   <p>
     <%= label_tag 'user_block_period', t('user_block.edit.period') %><br />
   </p>
   <p>
     <%= label_tag 'user_block_period', t('user_block.edit.period') %><br />