Escape html entities in commit messages

2012-10-04 10:06:17 +02:00 · 2012-10-04 10:06:17 +02:00 · 987e351de7
commit 987e351de7
parent 0b8e956f32
1 changed files with 1 additions and 1 deletions
--- a/app/views/events/_event_push.atom.haml
+++ b/app/views/events/_event_push.atom.haml
@ -6,7 +6,7 @@
      %i
        at
        = commit.committed_date.strftime("%Y-%m-%d %H:%M:%S")
-    %blockquote= simple_format commit.safe_message
+    %blockquote= simple_format(escape_once(commit.safe_message))
  - if event.commits_count > 15
    %p
      %i