From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Tue, 2 Aug 2011 13:03:06 +0000 (+0000)
Subject: HTML escape at app/views/issues/_attributes.rhtml.
X-Git-Tag: 1.3.0~1574
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=dd28b61a68e765ec3b2ec67f12a12b9b02925378;p=redmine.git

HTML escape at app/views/issues/_attributes.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6369 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/issues/_attributes.rhtml b/app/views/issues/_attributes.rhtml
index e2d04ee51..ba42b919b 100644
--- a/app/views/issues/_attributes.rhtml
+++ b/app/views/issues/_attributes.rhtml
@@ -4,7 +4,7 @@
 <% if @issue.new_record? || @allowed_statuses.any? %>
 <p><%= f.select :status_id, (@allowed_statuses.collect {|p| [p.name, p.id]}), :required => true %></p>
 <% else %>
-<p><label><%= l(:field_status) %></label> <%= @issue.status.name %></p>
+<p><label><%= l(:field_status) %></label> <%= h(@issue.status.name) %></p>
 <% end %>
 
 <p><%= f.select :priority_id, (@priorities.collect {|p| [p.name, p.id]}), {:required => true}, :disabled => !@issue.leaf? %></p>