Escape user-supplied JavaScript. Fixes http://lists.openstreetmap.org/pipermail/talk...
[rails.git] / app / views / user / _friend_map.html.erb
index 75303f10d349b3e6fdd1288c2501a449114efb86..a73bb53b8250a5bad816f6e624d52b8bea8e3520 100644 (file)
@@ -54,7 +54,7 @@
     near_icon.url = OpenLayers.Util.getImagesLocation() + "marker-green.png";;
     var i = nearest.length;
     while( i-- ) {
-      var description = '<%= t 'user.friend_map.nearby mapper'%><a href="/user/'+nearest[i].display_name+'">'+nearest[i].display_name+'</a>'
+      var description = i18n('<%= t 'user.friend_map.nearby mapper'%>', { nearby_user: '<a href="/user/'+nearest[i].display_name+'">'+nearest[i].display_name+'</a>' });
       var nearmarker = addMarkerToMap(new OpenLayers.LonLat(nearest[i].home_lon, nearest[i].home_lat), near_icon.clone(), description);
     }