From: Tom Hughes Date: Tue, 4 Mar 2008 17:53:36 +0000 (+0000) Subject: More escaping. X-Git-Tag: live~8586 X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/c5f93e3ea0461ef6efdc15ae26c1948f52269eba More escaping. --- diff --git a/app/views/diary_entry/list.rhtml b/app/views/diary_entry/list.rhtml index b54807578..dd90de169 100644 --- a/app/views/diary_entry/list.rhtml +++ b/app/views/diary_entry/list.rhtml @@ -1,4 +1,4 @@ -

<%= @title %>

+

<%= h(@title) %>

<% if @this_user && @this_user.image %> <%= image_tag url_for_file_column(@this_user, "image") %>