HTML escape at app/helpers/queries_helper.rb.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@6353 e93f8b46-1217-0410-a6f0-8f06a7374b81
2026-03-09 22:20:55 +01:00 · 2011-08-02 12:50:09 +00:00
parent ef6a98642f
commit 79ff599223
1 changed files with 1 additions and 1 deletions
--- a/app/helpers/queries_helper.rb
+++ b/app/helpers/queries_helper.rb
@@ -45,7 +45,7 @@ module QueriesHelper
      if column.name == :done_ratio
        progress_bar(value, :width => '80px')
      else
-        value.to_s
+        h(value.to_s)
      end
    when 'User'
      link_to_user value