diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2011-07-30 08:35:43 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2011-07-30 08:35:43 +0000 |
| commit | c3be706ce572f7a7e1c5f47b62215a1aeb66ee2c (patch) | |
| tree | 1f0df81a92c6c9393e2e1ca8f036b11f62ff352f /app/views/custom_fields | |
| parent | 12785890180a9ee3e3cc88223615ccff2d966c42 (diff) | |
| download | redmine-c3be706ce572f7a7e1c5f47b62215a1aeb66ee2c.tar.gz redmine-c3be706ce572f7a7e1c5f47b62215a1aeb66ee2c.zip | |
Additional escaping.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6327 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/views/custom_fields')
| -rw-r--r-- | app/views/custom_fields/_form.rhtml | 2 | ||||
| -rw-r--r-- | app/views/custom_fields/_index.rhtml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/app/views/custom_fields/_form.rhtml b/app/views/custom_fields/_form.rhtml index 2900af900..7bbce5d57 100644 --- a/app/views/custom_fields/_form.rhtml +++ b/app/views/custom_fields/_form.rhtml @@ -82,7 +82,7 @@ when "IssueCustomField" %> <fieldset><legend><%=l(:label_tracker_plural)%></legend> <% for tracker in @trackers %> - <%= check_box_tag "custom_field[tracker_ids][]", tracker.id, (@custom_field.trackers.include? tracker) %> <%= tracker.name %> + <%= check_box_tag "custom_field[tracker_ids][]", tracker.id, (@custom_field.trackers.include? tracker) %> <%=h tracker.name %> <% end %> <%= hidden_field_tag "custom_field[tracker_ids][]", '' %> </fieldset> diff --git a/app/views/custom_fields/_index.rhtml b/app/views/custom_fields/_index.rhtml index 21ae01bef..a6495fbfe 100644 --- a/app/views/custom_fields/_index.rhtml +++ b/app/views/custom_fields/_index.rhtml @@ -13,7 +13,7 @@ <tbody> <% (@custom_fields_by_type[tab[:name]] || []).sort.each do |custom_field| -%> <tr class="<%= cycle("odd", "even") %>"> - <td><%= link_to custom_field.name, :action => 'edit', :id => custom_field %></td> + <td><%= link_to h(custom_field.name), :action => 'edit', :id => custom_field %></td> <td align="center"><%= l(Redmine::CustomFieldFormat.label_for(custom_field.field_format)) %></td> <td align="center"><%= checked_image custom_field.is_required? %></td> <% if tab[:name] == 'IssueCustomField' %> |