HTML escape at app/helpers/reports_helper.rb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6354 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/helpers/reports_helper.rb b/app/helpers/reports_helper.rb
index fc4d0a06c9cbdf198c3cd91c299d940176d0dc1c..7372633650e7cdb714d46ac60b2483d1fd2962e7 100644 (file)
--- a/app/helpers/reports_helper.rb
+++ b/app/helpers/reports_helper.rb
@@ -31,6 +31,6 @@ module ReportsHelper
 
   def aggregate_link(data, criteria, *args)
     a = aggregate data, criteria
-    a > 0 ? link_to(a, *args) : '-'
+    a > 0 ? link_to(h(a), *args) : '-'
   end
 end