Tidy up message sensitisation a bit more, and add sensitisation of

[rails.git] / app / views / diary_entry / _diary_entry.rhtml

diff --git a/app/views/diary_entry/_diary_entry.rhtml b/app/views/diary_entry/_diary_entry.rhtml
index 13a2dff30bb67bbefcdc1eadb10e782bf781dd4f..4cf824600d9418fa7a737a7634aa2b8e8d588293 100644 (file)
--- a/app/views/diary_entry/_diary_entry.rhtml
+++ b/app/views/diary_entry/_diary_entry.rhtml
@@ -1,5 +1,8 @@
-<b><%= diary_entry.title %></b><br />
-<%= simple_format(diary_entry.body) %>
-Posted by user <b><%= link_to diary_entry.user.display_name,{:controller => 'user', :action=>'diary', :display_name => diary_entry.user.display_name} %></b> at <%= diary_entry.created_at %><br />
+<b><%= h(diary_entry.title) %></b><br />
+<%= htmlize(diary_entry.body) %>
+<% if diary_entry.latitude and diary_entry.longitude %>
+Coordinates: <div class="geo" style="display: inline"><span class="latitude"><%= diary_entry.latitude %></span>; <span class="longitude"><%= diary_entry.longitude %></span></div> (<%=link_to 'map', :controller => 'site', :action => 'index', :lat => diary_entry.latitude, :lon => diary_entry.longitude, :zoom => 14 %> / <%=link_to 'edit', :controller => 'site', :action => 'edit', :lat => diary_entry.latitude, :lon => diary_entry.longitude, :zoom => 14 %>)<br/>
+<% end %>
+Posted by <b><%= link_to diary_entry.user.display_name, :controller => 'user', :action => 'view', :display_name => diary_entry.user.display_name %></b> at <%= diary_entry.created_at %><br />
 <br />
 <hr />