Fix various auth bugs with the changeset listing stuff, catch exception (but not...

[rails.git] / app / views / diary_entry / view.rhtml

diff --git a/app/views/diary_entry/view.rhtml b/app/views/diary_entry/view.rhtml
index fbc316cc1d61e84bdc6cbdf8a9eff00429774110..6e1f75a32bd0e30251f681458c93262b8be1a9c4 100644 (file)
--- a/app/views/diary_entry/view.rhtml
+++ b/app/views/diary_entry/view.rhtml
@@ -1,12 +1,14 @@
-<h2><%= @entry.user.display_name %>'s diary</h2>
+<h2><%= h(@entry.user.display_name) %>'s diary</h2>

 
 <%= render :partial => 'diary_entry', :object => @entry %>
 
 
 <%= render :partial => 'diary_entry', :object => @entry %>
 

+<a id="comments"></a>
+

 <%= render :partial => 'diary_comment', :collection => @entry.diary_comments %>
 
 <% if @user %>
 
 <%= render :partial => 'diary_comment', :collection => @entry.diary_comments %>
 
 <% if @user %>
 

-<h4 id="comment">Leave a comment</h4>
+<h4 id="newcomment">Leave a comment</h4>

 <%= error_messages_for 'diary_comment' %>
 <% form_for :diary_comment, @diary_comment, :url => { :action => 'comment' } do |f| %>
 <%= f.text_area :body, :cols => 80, :rows => 5 %>
 <%= error_messages_for 'diary_comment' %>
 <% form_for :diary_comment, @diary_comment, :url => { :action => 'comment' } do |f| %>
 <%= f.text_area :body, :cols => 80, :rows => 5 %>


@@ -17,6 +19,6 @@
 
 <% else %>
 
 
 <% else %>
 

-<h4 id="comment"><%= link_to "Login", :controller => 'user', :action => 'login', :referer => request.request_uri %> to leave a comment</h4>
+<h4 id="newcomment"><%= link_to "Login", :controller => 'user', :action => 'login', :referer => request.request_uri %> to leave a comment</h4>

 
 <% end %>
 
 <% end %>