HTML escape at app/views/documents/show.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6367 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/documents/show.rhtml b/app/views/documents/show.rhtml
index 63e3210136c9e464f0514887fd872e5c7fdb4727..29845bfa336ae31eb61cb3d3efed0af816b273ae 100644 (file)
--- a/app/views/documents/show.rhtml
+++ b/app/views/documents/show.rhtml
@@ -25,7 +25,7 @@
   <% end %> 
 <% end %>
 
-<% html_title @document.title -%>
+<% html_title h(@document.title) -%>
 
 <% content_for :header_tags do %>
     <%= stylesheet_link_tag 'scm' %>