HTML escape at app/views/auth_sources/edit.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6363 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/auth_sources/edit.rhtml b/app/views/auth_sources/edit.rhtml
index 165fd4f3ec68b53896d0041a6fcf726589c15b86..e2c99aa3c5e49458e228905783d44f0efdb0ce00 100644 (file)
--- a/app/views/auth_sources/edit.rhtml
+++ b/app/views/auth_sources/edit.rhtml
@@ -1,4 +1,4 @@
-<h2><%=l(:label_auth_source)%> (<%= @auth_source.auth_method_name %>)</h2>
+<h2><%=l(:label_auth_source)%> (<%= h(@auth_source.auth_method_name) %>)</h2>
 
 <% form_tag({:action => 'update', :id => @auth_source}, :class => "tabular") do %>
   <%= render :partial => 'form' %>