HTML escape at app/views/news/show.rhtml.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6379 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/news/show.rhtml

@@ -63,7 +63,7 @@
 <% end %>
 <% end %>
 
-<% html_title @news.title -%>
+<% html_title h(@news.title) -%>
 
 <% content_for :header_tags do %>
   <%= stylesheet_link_tag 'scm' %>