Download as
Browse Code »

Commit b449ecbd03b121a4bdef4f143fad80fa0f7f7539

Authored by Antonio Terceiro
1 parent 8cab970c
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

Escape article titles in recent documents block

Showing 1 changed file with 1 additions and 1 deletions   Show diff stats
app/models/recent_documents_block.rb
  Diff comments   View file @b449ecb
... ... @@ -19,7 +19,7 @@ class RecentDocumentsBlock < Block
19 19 docs = self.limit.nil? ? owner.recent_documents : owner.recent_documents(self.limit)
20 20  
21 21 block_title(title) +
22   - content_tag('ul', docs.map {|item| content_tag('li', link_to(item.title, item.url))}.join("\n"))
  22 + content_tag('ul', docs.map {|item| content_tag('li', link_to(h(item.title), item.url))}.join("\n"))
23 23  
24 24 end
25 25  
... ...