From a75eab1adba261c2ced1780cfc0ad092a6547cec Mon Sep 17 00:00:00 2001
From: Eric Davis <edavis@littlestreamsoftware.com>
Date: Mon, 27 Jun 2011 15:20:15 -0700
Subject: [PATCH] [#490] Escape AuthSources in the list.
Contributed by MAEDA, Go
---
app/views/auth_sources/index.html.erb | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/app/views/auth_sources/index.html.erb b/app/views/auth_sources/index.html.erb
index 6e8b4d7db..56906bd43 100644
--- a/app/views/auth_sources/index.html.erb
+++ b/app/views/auth_sources/index.html.erb
@@ -15,10 +15,10 @@
<tbody>
<% for source in @auth_sources %>
<tr class="<%= cycle("odd", "even") %>">
- <td><%= link_to source.name, :action => 'edit', :id => source%></td>
- <td align="center"><%= source.auth_method_name %></td>
- <td align="center"><%= source.host %></td>
- <td align="center"><%= source.users.count %></td>
+ <td><%= link_to(h(source.name), :action => 'edit', :id => source)%></td>
+ <td align="center"><%= h source.auth_method_name %></td>
+ <td align="center"><%= h source.host %></td>
+ <td align="center"><%= h source.users.count %></td>
<td class="buttons">
<%= link_to l(:button_test), :action => 'test_connection', :id => source %>
<%= link_to l(:button_delete), { :action => 'destroy', :id => source },
--
GitLab