diff options
author | Eric Davis <edavis@littlestreamsoftware.com> | 2010-01-13 17:27:37 +0000 |
---|---|---|
committer | Eric Davis <edavis@littlestreamsoftware.com> | 2010-01-13 17:27:37 +0000 |
commit | 667a7256a7c3d106db7fc664e95b763fad1e9923 (patch) | |
tree | fa54e86f325b5cdc3dae853460c66963e09e6d45 /app/views/repositories | |
parent | 0a05cc2a378033b4a1049089b7c0f0865b8f9d1e (diff) | |
download | redmine-667a7256a7c3d106db7fc664e95b763fad1e9923.tar.gz redmine-667a7256a7c3d106db7fc664e95b763fad1e9923.zip |
Escape the parent id parameter.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3309 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/views/repositories')
-rw-r--r-- | app/views/repositories/_dir_list_content.rhtml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/views/repositories/_dir_list_content.rhtml b/app/views/repositories/_dir_list_content.rhtml index 4e4589e1e..c5bd53ea7 100644 --- a/app/views/repositories/_dir_list_content.rhtml +++ b/app/views/repositories/_dir_list_content.rhtml @@ -1,7 +1,7 @@ <% @entries.each do |entry| %> <% tr_id = Digest::MD5.hexdigest(entry.path) depth = params[:depth].to_i %> -<tr id="<%= tr_id %>" class="<%= params[:parent_id] %> entry <%= entry.kind %>"> +<tr id="<%= tr_id %>" class="<%= h params[:parent_id] %> entry <%= entry.kind %>"> <td style="padding-left: <%=18 * depth%>px;" class="filename"> <% if entry.is_dir? %> <span class="expander" onclick="<%= remote_function :url => {:action => 'show', :id => @project, :path => to_path_param(entry.path), :rev => @rev, :depth => (depth + 1), :parent_id => tr_id}, |