summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJean-Philippe Lang <jp_lang@yahoo.fr>2011-07-30 11:27:04 +0000
committerJean-Philippe Lang <jp_lang@yahoo.fr>2011-07-30 11:27:04 +0000
commit40692c10cf22c71ef44be6706f5c8405d0f9478e (patch)
treef49cc675c2bf3f37d51b9b253ce003fe0ae75bc1
parent5ba1ef5df7df30a61c837f31572477d0b8b0eb38 (diff)
downloadredmine-40692c10cf22c71ef44be6706f5c8405d0f9478e.tar.gz
redmine-40692c10cf22c71ef44be6706f5c8405d0f9478e.zip
HTML escape.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6330 e93f8b46-1217-0410-a6f0-8f06a7374b81
-rw-r--r--app/views/context_menus/time_entries.html.erb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/views/context_menus/time_entries.html.erb b/app/views/context_menus/time_entries.html.erb
index ed6ba4ee7..fc665487a 100644
--- a/app/views/context_menus/time_entries.html.erb
+++ b/app/views/context_menus/time_entries.html.erb
@@ -14,7 +14,7 @@
<a href="#" class="submenu"><%= l(:field_activity) %></a>
<ul>
<% @activities.each do |u| -%>
- <li><%= context_menu_link u.name, {:controller => 'timelog', :action => 'bulk_edit', :ids => @time_entries.collect(&:id), :time_entry => {'activity_id' => u}, :back_url => @back}, :method => :post,
+ <li><%= context_menu_link h(u.name), {:controller => 'timelog', :action => 'bulk_edit', :ids => @time_entries.collect(&:id), :time_entry => {'activity_id' => u}, :back_url => @back}, :method => :post,
:selected => (@time_entry && u == @time_entry.activity), :disabled => !@can[:update] %></li>
<% end -%>
<li><%= context_menu_link l(:label_nobody), {:controller => 'timelog', :action => 'bulk_edit', :ids => @time_entries.collect(&:id), :time_entry => {'activity_id' => 'none'}, :back_url => @back}, :method => :post,