From: Toshi MARUYAMA <marutosijp2@yahoo.co.jp>
Date: Tue, 2 Aug 2011 13:22:34 +0000 (+0000)
Subject: HTML escape at app/views/versions/index.html.erb.
X-Git-Tag: 1.3.0~1547
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=ec541afc14476c4670c52ba67b3468947d62d236;p=redmine.git

HTML escape at app/views/versions/index.html.erb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6396 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/versions/index.html.erb b/app/views/versions/index.html.erb
index b8e266afe..56785add2 100644
--- a/app/views/versions/index.html.erb
+++ b/app/views/versions/index.html.erb
@@ -9,7 +9,7 @@
 <% else %>
 <div id="roadmap">
 <% @versions.each do |version| %>
-    <h3 class="version"><%= tag 'a', :name => version.name %><%= link_to_version version %></h3>
+    <h3 class="version"><%= tag 'a', :name => h(version.name) %><%= link_to_version version %></h3>
     <%= render :partial => 'versions/overview', :locals => {:version => version} %>
     <%= render(:partial => "wiki/content", :locals => {:content => version.wiki_page.content}) if version.wiki_page %>