##// END OF EJS Templates
Escape query names (#2379)....
Jean-Philippe Lang -
r2167:e48f0f04e7c9
parent child
Show More
@@ -1,26 +1,26
1 1 <h3><%= l(:label_issue_plural) %></h3>
2 2 <%= link_to l(:label_issue_view_all), { :controller => 'issues', :action => 'index', :project_id => @project, :set_filter => 1 } %><br />
3 3 <% if @project %>
4 4 <%= link_to l(:field_summary), :controller => 'reports', :action => 'issue_report', :id => @project %><br />
5 5 <%= link_to l(:label_change_log), :controller => 'projects', :action => 'changelog', :id => @project %><br />
6 6 <% end %>
7 7 <%= call_hook(:view_issues_sidebar_issues_bottom) %>
8 8
9 9 <% planning_links = []
10 10 planning_links << link_to(l(:label_calendar), :action => 'calendar', :project_id => @project) if User.current.allowed_to?(:view_calendar, @project, :global => true)
11 11 planning_links << link_to(l(:label_gantt), :action => 'gantt', :project_id => @project) if User.current.allowed_to?(:view_gantt, @project, :global => true)
12 12 %>
13 13 <% unless planning_links.empty? %>
14 14 <h3><%= l(:label_planning) %></h3>
15 15 <p><%= planning_links.join(' | ') %></p>
16 16 <%= call_hook(:view_issues_sidebar_planning_bottom) %>
17 17 <% end %>
18 18
19 19 <% unless sidebar_queries.empty? -%>
20 20 <h3><%= l(:label_query_plural) %></h3>
21 21
22 22 <% sidebar_queries.each do |query| -%>
23 <%= link_to query.name, :controller => 'issues', :action => 'index', :project_id => @project, :query_id => query %><br />
23 <%= link_to(h(query.name), :controller => 'issues', :action => 'index', :project_id => @project, :query_id => query) %><br />
24 24 <% end -%>
25 25 <%= call_hook(:view_issues_sidebar_queries_bottom) %>
26 26 <% end -%>
General Comments 0
You need to be logged in to leave comments. Login now