deac/instiki
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

HTML-escaping of error and info messages

Browse source
This commit is contained in:
Alexey Verkhovsky 2005-05-09 04:31:02 +00:00
parent 757e58b94f
commit 7be6cbecba
3 changed files with 19 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/views/layouts/default.rhtml
View file

@ -61,11 +61,11 @@ PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
</h1>
<% if @error or @flash[:error] %> <div id="error">
<hr/><p><%= (@error || @flash[:error]) %></p><hr/></div>
<hr/><p><%= h(@error || @flash[:error]) %></p><hr/></div>
<% end %>
<% if @flash[:info] %> <div id="info">
<hr/><p><%= @flash[:info].to_s %></p><hr/></div>
<hr/><p><%= h @flash[:info] %></p><hr/></div>
<% end %>
<%= render 'navigation' unless @web.nil? || @hide_navigation %>