HTML escape at app/views/issues/index.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6371 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/issues/index.rhtml b/app/views/issues/index.rhtml
index 67c5b63f068d7b5ad60aa9e03b1985667a507477..72787661d7c7898dc3797cad497a5314f08b35e1 100644 (file)
--- a/app/views/issues/index.rhtml
+++ b/app/views/issues/index.rhtml
@@ -6,7 +6,7 @@
 </div>
 
 <h2><%= @query.new_record? ? l(:label_issue_plural) : h(@query.name) %></h2>
-<% html_title(@query.new_record? ? l(:label_issue_plural) : @query.name) %>
+<% html_title(@query.new_record? ? l(:label_issue_plural) : h(@query.name)) %>
 
 <% form_tag({ :controller => 'issues', :action => 'index', :project_id => @project }, :method => :get, :id => 'query_form') do %>
     <%= hidden_field_tag 'set_filter', '1' %>