Escape text passed to gfm by link_to_gfm

2012-09-19 19:42:26 -04:00 · 2012-09-19 19:42:26 -04:00 · 496f88afe1
commit 496f88afe1
parent 01974185a1
3 changed files with 12 additions and 5 deletions
--- a/app/views/commits/_commit_box.html.haml
+++ b/app/views/commits/_commit_box.html.haml
@ -11,10 +11,10 @@
      = link_to tree_project_ref_path(@project, @commit.id), class: "browse-button primary grouped" do
        %strong Browse Code »
    %h3.commit-title.page_title
-      = gfm @commit.title
+      = gfm escape_once(@commit.title)
    - if @commit.description.present?
      %pre.commit-description
-        = gfm @commit.description
+        = gfm escape_once(@commit.description)
  .commit-info
    .row
      .span4