fix xss issue in blame

Dmitriy Zaporozhets
1 parent de2c189e
Showing 1 changed file with 4 additions and 4 deletions Show diff stats
app/views/blame/show.html.haml
@@ -38,11 +38,11 @@
                   - current_line += 1
                 - else
                   - lines.each do |line|
-                    :preserve
-                      #{current_line}
+                    = current_line
+                    \
                     - current_line += 1
             %td.lines
               %pre
                 - lines.each do |line|
-                  :preserve
-                    #{line}
+                  = line
+                  \
...	...	@@ -38,11 +38,11 @@
38	38	- current_line += 1
39	39	- else
40	40	- lines.each do \|line\|
41		- :preserve
42		- #{current_line}
	41	+ = current_line
	42	+ \
43	43	- current_line += 1
44	44	%td.lines
45	45	%pre
46	46	- lines.each do \|line\|
47		- :preserve
48		- #{line}
	47	+ = line
	48	+ \
...	...