More display name escaping.

[rails.git] / app / views / diary_entry / _diary_comment.rhtml

diff --git a/app/views/diary_entry/_diary_comment.rhtml b/app/views/diary_entry/_diary_comment.rhtml
index 2e7d0a53103392e7d907269d2ff2439405d48446..2aca51f545c89d2f4adc1b4aedf5d9e32e4fd6b7 100644 (file)
--- a/app/views/diary_entry/_diary_comment.rhtml
+++ b/app/views/diary_entry/_diary_comment.rhtml
@@ -1,3 +1,3 @@
-<h4>Comment from <%= link_to diary_comment.user.display_name, :controller => 'user', :action => 'view', :display_name => diary_comment.user.display_name %>  at <%= diary_comment.created_at %></h4>
+<h4 id="comment<%= diary_comment.id %>">Comment from <%= link_to h(diary_comment.user.display_name), :controller => 'user', :action => 'view', :display_name => diary_comment.user.display_name %>  at <%= diary_comment.created_at %></h4>

 <%= htmlize(diary_comment.body) %>
 <hr />
 <%= htmlize(diary_comment.body) %>
 <hr />