Escape html entities in commit messages

987e351d · Alex Leutgöb · 0b8e956f · 987e351d
Commit 987e351d authored Oct 04, 2012 by Alex Leutgöb
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

app/views/events/_event_push.atom.haml app/views/events/_event_push.atom.haml +1 -1

No files found.
--- a/app/views/events/_event_push.atom.haml
+++ b/app/views/events/_event_push.atom.haml
@@ -6,7 +6,7 @@
      %i
        at
        = commit.committed_date.strftime("%Y-%m-%d %H:%M:%S")
-    %blockquote= simple_format commit.safe_message
+    %blockquote= simple_format(escape_once(commit.safe_message))
  - if event.commits_count > 15
    %p
      %i