diff options
| author | Louise Crow <louise.crow@gmail.com> | 2013-04-08 12:00:23 +0100 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2013-04-08 12:00:23 +0100 |
| commit | e283db7493e8e924a14ba20a8354b5fc4045f92c (patch) | |
| tree | 44832af6207350ce2b0316bb8a7b6368c83aa620 | |
| parent | 8021184944276e7ee1ce46c51a96f5b0ab1c382b (diff) | |
Escape content and mark known link as HTML safe to prevent it being escaped.
| -rw-r--r-- | app/views/admin_request/show.rhtml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/admin_request/show.rhtml b/app/views/admin_request/show.rhtml index 8606d21fa..7de0cbe9a 100644 --- a/app/views/admin_request/show.rhtml +++ b/app/views/admin_request/show.rhtml @@ -258,7 +258,7 @@ </td> <td> <% if column_name == 'body' %> - <%= simple_format(truncate(outgoing_message.body, :length => 400, :omission => link_to("...", "#", :class => "toggle-hidden" ))) %> + <%= simple_format(truncate(h(outgoing_message.body), :length => 400, :omission => link_to("...", "#", :class => "toggle-hidden" )).html_safe) %> <div style="display:none;"><%= simple_format( outgoing_message.body ) %></div> <% else %> <%= admin_value(value) %> @@ -303,7 +303,7 @@ </td> <td> <% if column_name =~ /^cached_.*?$/ %> - <%= simple_format( truncate(value, :length => 400, :omission => link_to("...", "#", :class => "toggle-hidden"))) %> + <%= simple_format( truncate(h(value), :length => 400, :omission => link_to("...", "#", :class => "toggle-hidden")).html_safe) %> <div style="display:none;"><%= simple_format(value) %></div> <% else %> <%= simple_format(value) %> |