HTML escape at app/views/news/show.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6379 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/news/show.rhtml b/app/views/news/show.rhtml
index 28db44e96460edac9c8228d3b9166b2c4ef5db2c..ea630779cb4b65f2f83e8fef54e6b39fd7bed89d 100644 (file)
--- a/app/views/news/show.rhtml
+++ b/app/views/news/show.rhtml
@@ -63,7 +63,7 @@
 <% end %>
 <% end %>
 
-<% html_title @news.title -%>
+<% html_title h(@news.title) -%>
 
 <% content_for :header_tags do %>
   <%= stylesheet_link_tag 'scm' %>