HTML escape at app/views/versions/index.html.erb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6396 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/versions/index.html.erb b/app/views/versions/index.html.erb
index b8e266afe3215e4710a373dbd10e0cb6995bd200..56785add262ae18967927d846b54268a61a2db94 100644 (file)
--- a/app/views/versions/index.html.erb
+++ b/app/views/versions/index.html.erb
@@ -9,7 +9,7 @@
 <% else %>
 <div id="roadmap">
 <% @versions.each do |version| %>
-    <h3 class="version"><%= tag 'a', :name => version.name %><%= link_to_version version %></h3>
+    <h3 class="version"><%= tag 'a', :name => h(version.name) %><%= link_to_version version %></h3>
     <%= render :partial => 'versions/overview', :locals => {:version => version} %>
     <%= render(:partial => "wiki/content", :locals => {:content => version.wiki_page.content}) if version.wiki_page %>