Escape member name.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2636 e93f8b46-1217-0410-a6f0-8f06a7374b81

Escape member name.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2636 e93f8b46-1217-0410-a6f0-8f06a7374b81
3557e767 · Jean-Philippe Lang · 90810c07 · 3557e767
Commit 3557e767 authored Mar 27, 2009 by Jean-Philippe Lang
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

_members.rhtml app/views/projects/settings/_members.rhtml +1 -1

No files found.
--- a/app/views/projects/settings/_members.rhtml
+++ b/app/views/projects/settings/_members.rhtml
@@ -17,7 +17,7 @@
 	<% members.each do |member| %>
 	<% next if member.new_record? %>
 	<tr id="member-<%= member.id %>" class="<%= cycle 'odd', 'even' %>">
-	<td><%= member.name %></td>
+	<td><%=h member.name %></td>
    <td align="center">
    <% if authorize_for('members', 'edit') %>
      <% remote_form_for(:member, member, :url => {:controller => 'members', :action => 'edit', :id => member}, :method => :post) do |f| %>