HTML escape at app/views/mailer/attachments_added.text.html.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6376 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/mailer/attachments_added.text.html.rhtml b/app/views/mailer/attachments_added.text.html.rhtml
index 369834b6d320f33ed02abe5e3ba0fb16a3186898..11d1cf54c584c0466f620f969e8d4a698b5a8a80 100644 (file)
--- a/app/views/mailer/attachments_added.text.html.rhtml
+++ b/app/views/mailer/attachments_added.text.html.rhtml
@@ -1,4 +1,4 @@
-<%= link_to @added_to, @added_to_url %><br />
+<%= link_to h(@added_to), @added_to_url %><br />
 
 <ul><% @attachments.each do |attachment | %>
 <li><%=h attachment.filename %></li>