Escape project's name in cross project label

2016-03-05 16:01:05 +01:00 · 2016-03-05 16:01:05 +01:00 · b3f533c3a7
parent fa639df5c7
commit b3f533c3a7
1 changed files with 1 additions and 1 deletions
--- a/app/helpers/labels_helper.rb
+++ b/app/helpers/labels_helper.rb
@ -65,7 +65,7 @@ module LabelsHelper

  def render_colored_cross_project_label(label)
    label_suffix = label.project.name_with_namespace
-    label_suffix = " <i>in #{label_suffix}</i>"
+    label_suffix = " <i>in #{escape_once(label_suffix)}</i>"
    render_colored_label(label, label_suffix)
  end