X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/4016d8e2232e0fa2c26183cfe394c65eb2f13655..2cbcabb3f6992904903a72dfbcef624bd391a314:/app/views/user/login.rhtml

diff --git a/app/views/user/login.rhtml b/app/views/user/login.rhtml
index 215385c36..5c6ec3ec5 100644
--- a/app/views/user/login.rhtml
+++ b/app/views/user/login.rhtml
@@ -2,7 +2,7 @@
 Please login or <%= link_to 'create an account', :controller => 'user', :action => 'new' %>.<br />
 
 <% form_tag :action => 'login' do %>
-<%= hidden_field_tag('referer', params[:referer]) %>
+<%= hidden_field_tag('referer', h(params[:referer])) %>
 <table>
   <tr><td>Email Address:</td><td><%= text_field('user', 'email',{:size => 50, :maxlength => 255}) %></td></tr>
   <tr><td>Password:</td><td><%= password_field('user', 'password',{:size => 50, :maxlength => 255}) %></td></tr>