From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Tue, 2 Aug 2011 13:17:32 +0000 (+0000)
Subject: HTML escape at app/views/wiki/date_index.html.erb.
X-Git-Tag: 1.3.0~1554
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=c74588bf92553757d38cd718d33199730a198724;p=redmine.git

HTML escape at app/views/wiki/date_index.html.erb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6389 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/wiki/date_index.html.erb b/app/views/wiki/date_index.html.erb
index a0327cf4c..e1d39baef 100644
--- a/app/views/wiki/date_index.html.erb
+++ b/app/views/wiki/date_index.html.erb
@@ -12,7 +12,7 @@
 <h3><%= format_date(date) %></h3>
 <ul>
 <% @pages_by_date[date].each do |page| %>
-    <li><%= link_to page.pretty_title, :action => 'show', :id => page.title, :project_id => page.project %></li>
+    <li><%= link_to h(page.pretty_title), :action => 'show', :id => page.title, :project_id => page.project %></li>
 <% end %>
 </ul>
 <% end %>