From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Tue, 2 Aug 2011 13:10:59 +0000 (+0000)
Subject: HTML escape at app/views/projects/list_members.rhtml.
X-Git-Tag: 1.3.0~1563
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=6a4114e842aa2e4850abcc4cce797c08d711db50;p=redmine.git

HTML escape at app/views/projects/list_members.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6380 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/projects/list_members.rhtml b/app/views/projects/list_members.rhtml
index 7f2ae3795..04de16044 100644
--- a/app/views/projects/list_members.rhtml
+++ b/app/views/projects/list_members.rhtml
@@ -4,7 +4,7 @@
 
 <% members = @members.group_by {|m| m.role } %>
 <% members.keys.sort{|x,y| x.position <=> y.position}.each do |role| %>
-<h3><%= role.name %></h3>
+<h3><%= h(role.name) %></h3>
 <ul>
 <% members[role].each do |m| %>
 <li><%= link_to_user m.user %> (<%= format_date m.created_on %>)</li>