Merged r6127 from trunk.

Escape AuthSources in the list.

Contributed by MAEDA, Go

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/branches/1.2-stable@6128 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/auth_sources/index.html.erb b/app/views/auth_sources/index.html.erb
index 6e8b4d7db73fe9a4856518fadc10f635af7b673e..56906bd43342882a09c6ca0575e1d992399f53bf 100644 (file)
--- a/app/views/auth_sources/index.html.erb
+++ b/app/views/auth_sources/index.html.erb
@@ -15,10 +15,10 @@
   <tbody>
 <% for source in @auth_sources %>
   <tr class="<%= cycle("odd", "even") %>">
-    <td><%= link_to source.name, :action => 'edit', :id => source%></td>
-    <td align="center"><%= source.auth_method_name %></td>
-    <td align="center"><%= source.host %></td>    
-    <td align="center"><%= source.users.count %></td>
+    <td><%= link_to(h(source.name), :action => 'edit', :id => source)%></td>
+    <td align="center"><%= h source.auth_method_name %></td>
+    <td align="center"><%= h source.host %></td>
+    <td align="center"><%= h source.users.count %></td>
     <td class="buttons">
        <%= link_to l(:button_test), :action => 'test_connection', :id => source %>
        <%= link_to l(:button_delete), { :action => 'destroy', :id => source },