Don't hardcode the API version in the data browser.

[rails.git] / app / views / trace / view.rhtml

diff --git a/app/views/trace/view.rhtml b/app/views/trace/view.rhtml
index a5b0cef099b3636614b7b6c01f52c7d71d9d47c8..f547f05db4ddeafd85fc1ad4e90888d5026317f9 100644 (file)
--- a/app/views/trace/view.rhtml
+++ b/app/views/trace/view.rhtml
@@ -1,6 +1,10 @@
-<h2><%= @title %></h2>
+<h2><%= h(@title) %></h2>
 
-<img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
+  <% if @trace.inserted %>
+    <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
+  <% else %>
+    <span style="color:red">PENDING</span>
+  <% end %>
 
 <table border="0">
   <tr>
@@ -22,11 +26,11 @@
   <% end %>
   <tr>
     <td>Owner:</td>
-    <td><%= link_to @trace.user.display_name, {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
+    <td><%= link_to h(@trace.user.display_name), {:controller => 'user', :action => 'view', :display_name => @trace.user.display_name} %></td>
   </tr>
   <tr>
     <td>Description:</td>
-    <td><%= @trace.description %></td>
+    <td><%= h(@trace.description) %></td>
   </tr>
   <tr>
     <td>Tags:</td>