##// END OF EJS Templates
HTML escape some user values in account sidebar (#8345)....
Toshi MARUYAMA -
r5627:1d78dd832458
parent child
Show More
@@ -1,6 +1,6
1 1 <h3><%=l(:label_my_account)%></h3>
2 2
3 <p><%=l(:field_login)%>: <strong><%= link_to @user.login, user_path(@user) %></strong><br />
3 <p><%=l(:field_login)%>: <strong><%= link_to(h(@user.login), user_path(@user) %></strong><br />
4 4 <%=l(:field_created_on)%>: <%= format_time(@user.created_on) %></p>
5 5
6 6
@@ -19,7 +19,7
19 19 <h4><%= l(:label_api_access_key) %></h4>
20 20 <div>
21 21 <%= link_to_function(l(:button_show), "$('api-access-key').toggle();")%>
22 <pre id='api-access-key' class='autoscroll'><%= @user.api_key %></pre>
22 <pre id='api-access-key' class='autoscroll'><%= h(@user.api_key) %></pre>
23 23 </div>
24 24 <%= javascript_tag("$('api-access-key').hide();") %>
25 25 <p>
General Comments 0
You need to be logged in to leave comments. Login now