HTML escape at app/views/auth_sources/new.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6364 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/auth_sources/new.rhtml b/app/views/auth_sources/new.rhtml
index 2d493dc3ae297eca8f75257bef8aeebb920f5b47..d0b9b1d4303a199b186f55640a909e5561a4bf3c 100644 (file)
--- a/app/views/auth_sources/new.rhtml
+++ b/app/views/auth_sources/new.rhtml
@@ -1,4 +1,4 @@
-<h2><%=l(:label_auth_source_new)%> (<%= @auth_source.auth_method_name %>)</h2>
+<h2><%=l(:label_auth_source_new)%> (<%= h(@auth_source.auth_method_name) %>)</h2>
 
 <% form_tag({:action => 'create'}, :class => "tabular") do %>
   <%= render :partial => 'form' %>