diff --git a/app/views/profile_editor/_pending_tasks.html.erb b/app/views/profile_editor/_pending_tasks.html.erb index 5324a55..cd3ed15 100644 --- a/app/views/profile_editor/_pending_tasks.html.erb +++ b/app/views/profile_editor/_pending_tasks.html.erb @@ -4,7 +4,7 @@

<%= _('You have pending requests') %>

<%= button(:todo, _('Process requests'), :controller => 'tasks', :action => 'index') %>
diff --git a/test/integration/safe_strings_test.rb b/test/integration/safe_strings_test.rb index f9c598d..414e3a2 100644 --- a/test/integration/safe_strings_test.rb +++ b/test/integration/safe_strings_test.rb @@ -84,4 +84,12 @@ class SafeStringsTest < ActionDispatch::IntegrationTest } end + should 'not escape task information on manage profile' do + create_user('marley', :password => 'test', :password_confirmation => 'test').activate + person = Person['marley'] + task = create(Task, :requestor => person, :target => person) + login 'marley', 'test' + get "/myprofile/marley" + assert_select ".pending-tasks ul li a" + end end -- libgit2 0.21.2