Escape text passed directly to gfm

2012-09-19 20:21:12 -04:00 · 2012-09-19 20:21:12 -04:00 · ba72c6f683
commit ba72c6f683
parent 496f88afe1
7 changed files with 7 additions and 7 deletions
--- a/app/views/merge_requests/show/_mr_box.html.haml
+++ b/app/views/merge_requests/show/_mr_box.html.haml
@ -5,7 +5,7 @@
        .alert-message.error.status_info Closed
      - else
        .alert-message.success.status_info Open
-      = gfm @merge_request.title
+      = gfm escape_once(@merge_request.title)

  .middle_box_content
    %div