From 4b262d15878b31c6c2c7efd8236fb5c65093ba11 Mon Sep 17 00:00:00 2001
From: Simon Brandhof <simon.brandhof@gmail.com>
Date: Thu, 26 Apr 2012 22:20:59 +0200
Subject: [PATCH] SONAR-3406 Missing HTML escape in 'Edit rule' page in Quality
 profiles for rule parameters

---
 .../webapp/WEB-INF/app/views/rules_configuration/edit.html.erb  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sonar-server/src/main/webapp/WEB-INF/app/views/rules_configuration/edit.html.erb b/sonar-server/src/main/webapp/WEB-INF/app/views/rules_configuration/edit.html.erb
index b80e0565774..63990f20cd0 100644
--- a/sonar-server/src/main/webapp/WEB-INF/app/views/rules_configuration/edit.html.erb
+++ b/sonar-server/src/main/webapp/WEB-INF/app/views/rules_configuration/edit.html.erb
@@ -44,7 +44,7 @@
       <td width="1%" nowrap><%= parameter.name %>:</td>
       <td class="sep"> </td>
       <td>
-        <input type="text" name="rule_param[<%= parameter.name -%>]" value="<%= parameter.default_value -%>"></input>
+        <input type="text" name="rule_param[<%= u parameter.name -%>]" value="<%= h parameter.default_value -%>"></input>
         <span class="small"><%= parameter.description %></span>
       </td>
     </tr>
-- 
2.39.5