Escape page title.

[rails.git] / app / views / layouts / site.rhtml
diff --git a/app/views/layouts/site.rhtml b/app/views/layouts/site.rhtml

index 0d1c24df2baa8bf8177f2b7c71ee172c2477988f..bcb479ccacf7fdd600557e6f1317c1b478ea9389 100644 (file)
--- a/app/views/layouts/site.rhtml
+++ b/app/views/layouts/site.rhtml
@@ -7,7 +7,7 @@
      <%= stylesheet_link_tag 'site' %>
      <%= stylesheet_link_tag 'print', :media => "print" %>
      <%= tag("link", { :rel => "search", :type => "application/opensearchdescription+xml", :title => "OpenStreetMap Search", :href => "/opensearch/osm.xml" }) %>
-    <title>OpenStreetMap<%= ' | '+@title if @title %></title>
+    <title>OpenStreetMap<%= ' | '+ h(@title) if @title %></title>
    </head>
    <body>
      <div id="content">