From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Tue, 2 Aug 2011 13:10:19 +0000 (+0000)
Subject: HTML escape at app/views/news/show.rhtml.
X-Git-Tag: 1.3.0~1564
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=2b3726bdc07ef58e2a7d3a27fcd2ac884aaee39a;p=redmine.git

HTML escape at app/views/news/show.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6379 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/news/show.rhtml b/app/views/news/show.rhtml
index 28db44e96..ea630779c 100644
--- a/app/views/news/show.rhtml
+++ b/app/views/news/show.rhtml
@@ -63,7 +63,7 @@
 <% end %>
 <% end %>
 
-<% html_title @news.title -%>
+<% html_title h(@news.title) -%>
 
 <% content_for :header_tags do %>
   <%= stylesheet_link_tag 'scm' %>