Add a few more escape calls to prevent nasty HTML being rendered. Also

[rails.git] / app / views / diary_entry / list.rhtml

diff --git a/app/views/diary_entry/list.rhtml b/app/views/diary_entry/list.rhtml
index 8a60c1863a63be1d0b9e89197fc9c1a6ada058ad..a7aa84c6f232cb6ea18e348fb7f5688340ce59bc 100644 (file)
--- a/app/views/diary_entry/list.rhtml
+++ b/app/views/diary_entry/list.rhtml
@@ -1,7 +1,11 @@
 <% if @this_user %>
   <h2><%= @this_user.display_name %>'s diary</h2>
-
-  <% if @user and @this_user.id == @user.id %>
+  <% if @user == @this_user %>
+    <%= link_to 'New diary post', :controller => 'diary_entry', :action => 'new', :display_name => @user.display_name %>
+  <% end %>
+<% else %>
+  <h2>Users' diaries</h2>
+  <% if @user %>
     <%= link_to 'New diary post', :controller => 'diary_entry', :action => 'new', :display_name => @user.display_name %>
   <% end %>
 <% end %>