Sanitise parameters used in URL generation

[rails.git] / app / views / user / _user.html.erb

diff --git a/app/views/user/_user.html.erb b/app/views/user/_user.html.erb
index 4f62a51e927416432564bf72060454309130ba3c..b1ea3f299c053d4e72e39339d38b8e9dd2b9d0e0 100644 (file)
--- a/app/views/user/_user.html.erb
+++ b/app/views/user/_user.html.erb
@@ -19,7 +19,7 @@
         %>
       <% end %>
     </p>
         %>
       <% end %>
     </p>

-    <%= htmlize(user.description) %>
+    <div class="richtext"><%= user.description.to_html %></div>

   </td>
   <td>
     <%= check_box_tag "user_#{user.id}", "", false, :name => "user[#{user.id}]" %>
   </td>
   <td>
     <%= check_box_tag "user_#{user.id}", "", false, :name => "user[#{user.id}]" %>