Merge potlatch_010 branch to head.

[rails.git] / app / views / trace / edit.rhtml

diff --git a/app/views/trace/edit.rhtml b/app/views/trace/edit.rhtml
index 22405c1fc1c12230f52320a5c79d882d36a5ecfe..d7c04182dbcebc636798eaaff4b8abd72b20cbff 100644 (file)
--- a/app/views/trace/edit.rhtml
+++ b/app/views/trace/edit.rhtml
@@ -1,4 +1,4 @@
-<h2><%= @title %></h2>
+<h2><%= h(@title) %></h2>
 
 <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
 
@@ -24,7 +24,7 @@
   <% end %>
   <tr>
     <td>Owner:</td>
-    <td><%= link_to @trace.user.display_name, {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
+    <td><%= link_to h(@trace.user.display_name), {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
   </tr>
   <tr>
     <td>Description:</td>