Put back HTML escaping of trace names removed in r16062.

diff --git a/app/views/trace/edit.html.erb b/app/views/trace/edit.html.erb
index eb04e7e8d081595f06509488a1eb2f12be24a4e4..2f73d2d4ed78c30b8fdb82df0cf9b4915bf8c9d1 100644 (file)
--- a/app/views/trace/edit.html.erb
+++ b/app/views/trace/edit.html.erb
@@ -1,4 +1,4 @@
-<h2><%= t 'trace.edit.heading', :name => @trace.name %></h2>
+<h2><%= t 'trace.edit.heading', :name => h(@trace.name) %></h2>

 
 <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
 
 
 <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
 

diff --git a/app/views/trace/view.html.erb b/app/views/trace/view.html.erb
index 048d92d35b40237b3d41ebe71006fa1d45f03649..0688ec130d6cbc9571775d6029ba2e3be430ec88 100644 (file)
--- a/app/views/trace/view.html.erb
+++ b/app/views/trace/view.html.erb
@@ -1,4 +1,4 @@
-<h2><%= t 'trace.view.heading', :name => @trace.name %></h2>
+<h2><%= t 'trace.view.heading', :name => h(@trace.name) %></h2>

 
   <% if @trace.inserted %>
     <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">
 
   <% if @trace.inserted %>
     <img src="<%= url_for :controller => 'trace', :action => 'picture', :id => @trace.id, :display_name => @trace.user.display_name %>">