Escape message titles and bodies. This is an emergency fix as some genius

[rails.git] / app / views / geocoder / _results.rhtml

diff --git a/app/views/geocoder/_results.rhtml b/app/views/geocoder/_results.rhtml
index 477f2a0bcb4f56a7a87a44ecefc4525d68895f5e..9bcc5d8ae67f6f93976f3b1366f3a09ae63dc275 100644 (file)
--- a/app/views/geocoder/_results.rhtml
+++ b/app/views/geocoder/_results.rhtml
@@ -1,5 +1,6 @@
 <% results.each do |source| %>
 <% results.each do |source| %>

-<p class="search_results_heading">Results from <%= link_to source[:source], source[:url] %></p>
+<% type = source[:type] || "Results" %>
+<p class="search_results_heading"><%= type %> from <%= link_to source[:source], source[:url] %></p>

 <% if source[:results] %>
 <% if source[:results].empty? %>
 <p class="search_results_entry">No results found</p>
 <% if source[:results] %>
 <% if source[:results].empty? %>
 <p class="search_results_entry">No results found</p>