diff options
| author | Louise Crow <louise.crow@gmail.com> | 2014-12-22 10:56:00 +0000 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-22 16:33:13 +0000 |
| commit | cd68dbe8ef1339b930aa494a4fdae6cd2d6a50e7 (patch) | |
| tree | 30de6e5ef57f1f09e2a418af87bf96e53b6f60ec /app | |
| parent | 55f7ac2004f53ebc48efb90c45f64563a7cd660d (diff) | |
Sanitize the blog contents0.18.0.17hotfix/0.18.0.17
Diffstat (limited to 'app')
| -rw-r--r-- | app/views/general/blog.html.erb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/general/blog.html.erb b/app/views/general/blog.html.erb index 5dda7ab74..fd87bd9fe 100644 --- a/app/views/general/blog.html.erb +++ b/app/views/general/blog.html.erb @@ -10,9 +10,9 @@ <p class="subtitle"><%= _("Posted on {{date}} by {{author}}", :date=>simple_date(Time.parse(item['pubDate'][0])), :author=> item['creator'] ? item['creator'][0] : item['author'][0]) %></p> <div> <% if item['encoded'] %> - <%= raw item['encoded'][0] %> + <%= sanitize(raw item['encoded'][0]) %> <% elsif item['description'] %> - <%= raw item['description'][0] %> + <%= sanitize(raw item['description'][0]) %> <% end %> </div> <p><em> |