From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Mon, 27 Jun 2011 23:15:43 +0000 (+0000)
Subject: Escape AuthSources in the list.
X-Git-Tag: 1.3.0~1772
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=102a87dd522ead0104cd3ebc8c9abcbeb93b72d5;p=redmine.git

Escape AuthSources in the list.

Contributed by MAEDA, Go

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6127 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/auth_sources/index.html.erb b/app/views/auth_sources/index.html.erb
index 6e8b4d7db..56906bd43 100644
--- a/app/views/auth_sources/index.html.erb
+++ b/app/views/auth_sources/index.html.erb
@@ -15,10 +15,10 @@
   <tbody>
 <% for source in @auth_sources %>
   <tr class="<%= cycle("odd", "even") %>">
-    <td><%= link_to source.name, :action => 'edit', :id => source%></td>
-    <td align="center"><%= source.auth_method_name %></td>
-    <td align="center"><%= source.host %></td>    
-    <td align="center"><%= source.users.count %></td>
+    <td><%= link_to(h(source.name), :action => 'edit', :id => source)%></td>
+    <td align="center"><%= h source.auth_method_name %></td>
+    <td align="center"><%= h source.host %></td>
+    <td align="center"><%= h source.users.count %></td>
     <td class="buttons">
     	<%= link_to l(:button_test), :action => 'test_connection', :id => source %>
     	<%= link_to l(:button_delete), { :action => 'destroy', :id => source },