HTML escape at app/views/gantts/show.html.erb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6368 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/gantts/show.html.erb b/app/views/gantts/show.html.erb
index ddff80d869b0220f067e2e319abf93560c343e2d..1acd834878addc09dbbf93bf939a94d31afe6629 100644 (file)
--- a/app/views/gantts/show.html.erb
+++ b/app/views/gantts/show.html.erb
@@ -92,7 +92,7 @@ height = (show_weeks ? header_heigth : header_heigth + g_height)
        width = ((month_f >> 1) - month_f) * zoom - 1
        %>
        <div style="left:<%= left %>px;width:<%= width %>px;height:<%= height %>px;" class="gantt_hdr">
-       <%= link_to "#{month_f.year}-#{month_f.month}", @gantt.params.merge(:year => month_f.year, :month => month_f.month), :title => "#{month_name(month_f.month)} #{month_f.year}"%>
+       <%= link_to h("#{month_f.year}-#{month_f.month}"), @gantt.params.merge(:year => month_f.year, :month => month_f.month), :title => "#{month_name(month_f.month)} #{month_f.year}"%>
        </div>
        <% 
        left = left + width + 1