From c5f93e3ea0461ef6efdc15ae26c1948f52269eba Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 4 Mar 2008 17:53:36 +0000 Subject: [PATCH 1/1] More escaping. --- app/views/diary_entry/list.rhtml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/views/diary_entry/list.rhtml b/app/views/diary_entry/list.rhtml index b54807578..dd90de169 100644 --- a/app/views/diary_entry/list.rhtml +++ b/app/views/diary_entry/list.rhtml @@ -1,4 +1,4 @@ -

<%= @title %>

+

<%= h(@title) %>

<% if @this_user && @this_user.image %> <%= image_tag url_for_file_column(@this_user, "image") %> -- 2.43.2