Use only escaped auto_link
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
This commit is contained in:
parent
90c96d1dc0
commit
299114948b
|
|
@ -259,4 +259,8 @@ module ApplicationHelper
|
|||
|
||||
super
|
||||
end
|
||||
|
||||
def escaped_autolink(text)
|
||||
auto_link ERB::Util.html_escape(text), link: :urls
|
||||
end
|
||||
end
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
= @group.name
|
||||
- if @group.description.present?
|
||||
%p
|
||||
= auto_link @group.description, link: :urls
|
||||
= escaped_autolink(@group.description)
|
||||
= render "projects", projects: @projects
|
||||
- if current_user
|
||||
.prepend-top-20
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
.project-home-row
|
||||
.project-home-desc
|
||||
- if @project.description.present?
|
||||
= auto_link ERB::Util.html_escape(@project.description), link: :urls
|
||||
= escaped_autolink(@project.description)
|
||||
- if can?(current_user, :admin_project, @project)
|
||||
–
|
||||
= link_to 'Edit', edit_project_path
|
||||
|
|
|
|||
Loading…
Reference in New Issue