Merge branch 'escape-before-autolink' into 'master'

Escape before autolink

Because auto_link set description to html_safe but dont escape html!!! :(

See merge request !963
This commit is contained in:
Dmitriy Zaporozhets
2014-07-11 07:03:45 +00:00
+1 -1
View File
@@ -17,7 +17,7 @@
.col-md-7
.project-home-desc
- if @project.description.present?
= auto_link @project.description, link: :urls
= auto_link ERB::Util.html_escape(@project.description), link: :urls
- if can?(current_user, :admin_project, @project)
–
%strong= link_to 'Edit', edit_project_path