Don't escape HTML in the "user suspended" message

[rails.git] / app / views / trace / edit.html.erb

diff --git a/app/views/trace/edit.html.erb b/app/views/trace/edit.html.erb
index eb04e7e8d081595f06509488a1eb2f12be24a4e4..a694d55bb07b718cc3bf906388d45852aa1d29a4 100644 (file)
--- a/app/views/trace/edit.html.erb
+++ b/app/views/trace/edit.html.erb
@@ -1,8 +1,8 @@
-<h2><%= t 'trace.edit.heading', :name => @trace.name %></h2>
+<h2><%= t 'trace.edit.heading', :name => h(@trace.name) %></h2>
 
 <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
 
-<% form_for :trace, @trace do |f| %>
+<%= form_for @trace, :url => { :action => "edit" } do |f| %>
 
 <table border="0">
   <tr>
@@ -11,7 +11,7 @@
   </tr> 
   <tr>
     <td><%= t'trace.edit.uploaded_at' %></td>
-    <td><%= l @trace.timestamp %></td>
+    <td><%= l @trace.timestamp, :format => :friendly %></td>
   </tr>
   <% if @trace.inserted? %>
   <tr>
@@ -28,11 +28,15 @@
   </tr>
   <tr>
     <td><%= t'trace.edit.description' %></td>
-    <td><%= f.text_field :description %></td>
+    <td><%= f.text_field :description, :size => 50 %></td>
   </tr>
   <tr>
     <td><%= t'trace.edit.tags' %></td>
-    <td><%= f.text_field :tagstring %></td>
+    <td><%= f.text_field :tagstring, :size => 50 %> (<%= t'trace.edit.tags_help' %>)</td>
+  </tr>
+  <tr>
+    <td><%= t'trace.edit.visibility' %></td>
+    <td><%= f.select :visibility, [[t('trace.visibility.private'),"private"],[t('trace.visibility.public'),"public"],[t('trace.visibility.trackable'),"trackable"],[t('trace.visibility.identifiable'),"identifiable"]] %> (<a href="<%= t'trace.edit.visibility_help_url' %>"><%= t'trace.edit.visibility_help' %></a>)</td>
   </tr>
 </table>