Merge r22584 from trunk to 5.0-stable (#39999).

git-svn-id: https://svn.redmine.org/redmine/branches/5.0-stable@22586 e93f8b46-1217-0410-a6f0-8f06a7374b81

test/functional/messages_controller_test.rb

@@ -311,6 +311,19 @@ class MessagesControllerTest < Redmine::ControllerTest
     assert_include '> An other reply', response.body
   end
 
+  def test_quote_as_html_should_respond_with_404
+    @request.session[:user_id] = 2
+    get(
+      :quote,
+      :params => {
+        :board_id => 1,
+        :id => 3
+      },
+    )
+
+    assert_response 404
+  end
+
   def test_preview_new
     @request.session[:user_id] = 2
     post(