diff options
| author | Louise Crow <louise.crow@gmail.com> | 2014-12-22 10:56:00 +0000 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-22 17:32:25 +0000 |
| commit | 6e21d13dbab68a4856f23d321737a46868180c2b (patch) | |
| tree | 879faf1fe2e50f57b6dea6749dbda3e2b03f025b | |
| parent | 8f5c04b9ecd82521a1aef94e32dee994b1acde8c (diff) | |
Sanitize the blog contents0.7.0.9hotfix/0.7.0.9
| -rw-r--r-- | app/views/general/blog.rhtml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/general/blog.rhtml b/app/views/general/blog.rhtml index 07d6d2f14..6556afbf4 100644 --- a/app/views/general/blog.rhtml +++ b/app/views/general/blog.rhtml @@ -26,9 +26,9 @@ <p class="subtitle"><%= _("Posted on {{date}} by {{author}}", :date=>simple_date(Time.parse(item['pubDate'][0])), :author=>item['creator']) %></p> <div> <% if item['encoded'] %> - <%= raw item['encoded'] %> + <%= sanitize(raw item['encoded']) %> <% elsif item['description'] %> - <%= raw item['description'] %> + <%= sanitize(raw item['description']) %> <% end %> </div> <p><em> |