From 0033fcbf1286ebad5c9d9afe3d516f400d90af64 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 22 Nov 2011 22:45:24 +0000 Subject: [PATCH] Don't escape HTML in the message shown to anonymous users --- app/views/site/edit.html.erb | 5 ++--- app/views/user/account.html.erb | 2 +- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/app/views/site/edit.html.erb b/app/views/site/edit.html.erb index 37531a4a7..207cbdef4 100644 --- a/app/views/site/edit.html.erb +++ b/app/views/site/edit.html.erb @@ -6,9 +6,8 @@

<% elsif !@user.data_public? %>

<%= t 'site.edit.not_public' %>

-

<%= t 'site.edit.not_public_description', -:user_page => (link_to t('site.edit.user_page_link'), {:controller => 'user', :action => 'account', :display_name => @user.display_name, :anchor => 'public'}) %>

-

<%= t 'site.edit.anon_edits', :link => link_to(t('site.edit.anon_edits_link_text'), t('site.edit.anon_edits_link')) %>

+

<%= raw t 'site.edit.not_public_description', :user_page => (link_to t('site.edit.user_page_link'), {:controller => 'user', :action => 'account', :display_name => @user.display_name, :anchor => 'public'}) %>

+

<%= raw t 'site.edit.anon_edits', :link => link_to(t('site.edit.anon_edits_link_text'), t('site.edit.anon_edits_link')) %>

<% else %> <% content_for :greeting do %> <% if @user and !@user.home_lon.nil? and !@user.home_lat.nil? %> diff --git a/app/views/user/account.html.erb b/app/views/user/account.html.erb index 0da8b2530..988cd9121 100644 --- a/app/views/user/account.html.erb +++ b/app/views/user/account.html.erb @@ -129,7 +129,7 @@ <% unless @user.data_public? %>

<%= t 'user.account.public editing note.heading' %>

-<%= t 'user.account.public editing note.text' %> +<%= raw t 'user.account.public editing note.text' %> <%= button_to t('user.account.make edits public button'), :action => :go_public %> <% end %>
-- 2.43.2