diff options
| author | Robert Speicher <rspeicher@gmail.com> | 2015-04-27 22:09:00 -0400 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2015-04-30 16:35:26 -0400 |
| commit | 421edd35454103e3ed927de72d23a38bee1f97d3 (patch) | |
| tree | 4752112fe50dde5f7603fddaa60cc1d51bfc147e /lib | |
| parent | 588267b5e27238cdf406f248db7cc83b9b0881c8 (diff) | |
| download | gitlab-ce-421edd35454103e3ed927de72d23a38bee1f97d3.tar.gz | |
Escape normal text in our Redcarpet renderer
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/redcarpet/render/gitlab_html.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/redcarpet/render/gitlab_html.rb b/lib/redcarpet/render/gitlab_html.rb index 321be9202cc..5a87b230579 100644 --- a/lib/redcarpet/render/gitlab_html.rb +++ b/lib/redcarpet/render/gitlab_html.rb @@ -1,5 +1,6 @@ -class Redcarpet::Render::GitlabHTML < Redcarpet::Render::HTML +require 'active_support/core_ext/string/output_safety' +class Redcarpet::Render::GitlabHTML < Redcarpet::Render::HTML attr_reader :template alias_method :h, :template @@ -21,6 +22,7 @@ class Redcarpet::Render::GitlabHTML < Redcarpet::Render::HTML def normal_text(text) return text unless text.present? + text = ERB::Util.html_escape_once(text) text.gsub("'", "’") end |