Escape wiki annotate lines content (#2380).

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2168 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/wiki/annotate.rhtml b/app/views/wiki/annotate.rhtml
index 1c683404b19cb7a7216cbace5fe70fad6726484e..c274516063830191fcabbce3ed076edb5abc2d26 100644 (file)
--- a/app/views/wiki/annotate.rhtml
+++ b/app/views/wiki/annotate.rhtml
@@ -20,7 +20,7 @@
     <th class="line-num"><%= line_num %></th>
     <td class="revision"><%= link_to line[0], :controller => 'wiki', :action => 'index', :id => @project, :page => @page.title, :version => line[0] %></td>
     <td class="author"><%= h(line[1]) %></td>
-    <td class="line-code"><pre><%= line[2] %></pre></td>
+    <td class="line-code"><pre><%=h line[2] %></pre></td>
 </tr>
 <% line_num += 1 %>
 <% end -%>