X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/a894e75a1d898804ea6bc41c73384135ed83e87e..1e54573bae7eed568e99ebc0b0d448170f08c880:/app/views/message/new.rhtml?ds=sidebyside

diff --git a/app/views/message/new.rhtml b/app/views/message/new.rhtml
index 44ef84dfc..27c501322 100644
--- a/app/views/message/new.rhtml
+++ b/app/views/message/new.rhtml
@@ -3,7 +3,7 @@
 <h2>Send a new message to <%= display_name %></h2>
 
 <% if params[:display_name] %>
-<p>Writing a new message to <%= params[:display_name] %></p>  
+<p>Writing a new message to <%= h(params[:display_name]) %></p>  
 <p>TODO: drop down box of your friends</p>
 <%end%>
 
@@ -21,7 +21,7 @@
     </tr>
     <tr>
       <th></th>
-      <td><%= f.submit_tag 'Send' %></td>
+      <td><%= submit_tag 'Send' %></td>
     </tr>
   </table>
 <% end %>