##// END OF EJS Templates
Escapes HTML tags....
Jean-Philippe Lang -
r1598:9703f576d96c
parent child
Show More
@@ -1,7 +1,7
1 1 <h2><%=h @user.name %></h2>
2 2
3 3 <p>
4 <%= mail_to @user.mail unless @user.pref.hide_mail %>
4 <%= mail_to(h(@user.mail)) unless @user.pref.hide_mail %>
5 5 <ul>
6 6 <li><%=l(:label_registered_on)%>: <%= format_date(@user.created_on) %></li>
7 7 <% for custom_value in @custom_values %>
@@ -16,8 +16,8
16 16 <h3><%=l(:label_project_plural)%></h3>
17 17 <ul>
18 18 <% for membership in @memberships %>
19 <li><%= link_to membership.project.name, :controller => 'projects', :action => 'show', :id => membership.project %>
20 (<%= membership.role.name %>, <%= format_date(membership.created_on) %>)</li>
19 <li><%= link_to(h(membership.project.name), :controller => 'projects', :action => 'show', :id => membership.project) %>
20 (<%=h membership.role.name %>, <%= format_date(membership.created_on) %>)</li>
21 21 <% end %>
22 22 </ul>
23 23 <% end %>
@@ -3,7 +3,7
3 3 <div class="splitcontentleft">
4 4 <%= textilizable @project.description %>
5 5 <ul>
6 <% unless @project.homepage.blank? %><li><%=l(:field_homepage)%>: <%= auto_link @project.homepage %></li><% end %>
6 <% unless @project.homepage.blank? %><li><%=l(:field_homepage)%>: <%= auto_link(h(@project.homepage)) %></li><% end %>
7 7 <% if @subprojects.any? %>
8 8 <li><%=l(:label_subproject_plural)%>: <%= @subprojects.collect{|p| link_to(h(p.name), :action => 'show', :id => p)}.join(", ") %></li>
9 9 <% end %>
@@ -26,10 +26,10
26 26 <tbody>
27 27 <% for user in @users -%>
28 28 <tr class="user <%= cycle("odd", "even") %> <%= %w(anon active registered locked)[user.status] %>">
29 <td class="username"><%= link_to user.login, :action => 'edit', :id => user %></td>
30 <td class="firstname"><%= user.firstname %></td>
31 <td class="lastname"><%= user.lastname %></td>
32 <td class="email"><%= user.mail %></td>
29 <td class="username"><%= link_to h(user.login), :action => 'edit', :id => user %></td>
30 <td class="firstname"><%= h(user.firstname) %></td>
31 <td class="lastname"><%= h(user.lastname) %></td>
32 <td class="email"><%= h(user.mail) %></td>
33 33 <td align="center"><%= image_tag('true.png') if user.admin? %></td>
34 34 <td class="created_on" align="center"><%= format_time(user.created_on) %></td>
35 35 <td class="last_login_on" align="center"><%= format_time(user.last_login_on) unless user.last_login_on.nil? %></td>
@@ -18,7 +18,7
18 18 <ul>
19 19 <% for project in @projects %>
20 20 <li>
21 <%= link_to project.name, :controller => 'projects', :action => 'show', :id => project %> (<%= format_time(project.created_on) %>)
21 <%= link_to h(project.name), :controller => 'projects', :action => 'show', :id => project %> (<%= format_time(project.created_on) %>)
22 22 <%= textilizable project.short_description, :project => project %>
23 23 </li>
24 24 <% end %>
General Comments 0
You need to be logged in to leave comments. Login now