From 618526ba6297895d5ed4aaf04766afaab2f46544 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Mon, 24 Aug 2015 10:49:04 +0100 Subject: [PATCH 1/1] Don't treat flash messages as raw This will likely break some things, but we should fix them properly so that the rails auto-escaping can work. Fixes #1027 --- app/views/layouts/_flash.html.erb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/views/layouts/_flash.html.erb b/app/views/layouts/_flash.html.erb index 5a4288c4d..e72185101 100644 --- a/app/views/layouts/_flash.html.erb +++ b/app/views/layouts/_flash.html.erb @@ -1,20 +1,20 @@ <% if flash[:error] %>
<%= image_tag("notice.png", :class => "small_icon", :border => 0) %> -
<%= raw flash[:error] %>
+
<%= flash[:error] %>
<% end %> <% if flash[:warning] %>
<%= image_tag("notice.png", :class => "small_icon", :border => 0) %> -
<%= raw flash[:warning] %>
+
<%= flash[:warning] %>
<% end %> <% if flash[:notice] %>
<%= image_tag("notice.png", :class => "small_icon", :border => 0) %> -
<%= raw flash[:notice] %>
+
<%= flash[:notice] %>
<% end %> -- 2.43.2