Escape custom field name.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2737 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/account/show.rhtml b/app/views/account/show.rhtml
index 70ca309619051f71f7b5ff5fe0baf24078243cdd..410ea6ee41d243c0fa7d67db1eaa458b2536d01c 100644 (file)
--- a/app/views/account/show.rhtml
+++ b/app/views/account/show.rhtml
@@ -11,7 +11,7 @@
        <% end %>
        <% for custom_value in @custom_values %>
        <% if !custom_value.value.empty? %>
-    <li><%= custom_value.custom_field.name%>: <%=h show_value(custom_value) %></li>
+    <li><%=h custom_value.custom_field.name%>: <%=h show_value(custom_value) %></li>
        <% end %>
        <% end %>
     <li><%=l(:label_registered_on)%>: <%= format_date(@user.created_on) %></li>