diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-03-22 18:52:25 +0200 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-03-22 18:52:25 +0200 |
| commit | c0da61c6d88dd6ea08bd6ace3149652178d2e26d (patch) | |
| tree | c7f6fda7bcd830b63bf872f63203c35ab21eae0e | |
| parent | de2c189ec10448787e41e4f2283de7c120fb16df (diff) | |
| download | gitlab-ce-c0da61c6d88dd6ea08bd6ace3149652178d2e26d.tar.gz | |
fix xss issue in blame
| -rw-r--r-- | app/views/blame/show.html.haml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/app/views/blame/show.html.haml b/app/views/blame/show.html.haml index f85dde6dbbf..b2a45ef5303 100644 --- a/app/views/blame/show.html.haml +++ b/app/views/blame/show.html.haml @@ -38,11 +38,11 @@ - current_line += 1 - else - lines.each do |line| - :preserve - #{current_line} + = current_line + \ - current_line += 1 %td.lines %pre - lines.each do |line| - :preserve - #{line} + = line + \ |