diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-03-22 18:52:25 +0200 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-03-22 18:53:01 +0200 |
| commit | 0c7f426037db668fbd9ad11376b4db0007baafce (patch) | |
| tree | cd7b3e9ea8950206f829aef5b2cdc8feb3d08878 | |
| parent | 5c49cf6ca170aba7646f53d02130c79c0c4470a6 (diff) | |
| download | gitlab-ce-0c7f426037db668fbd9ad11376b4db0007baafce.tar.gz | |
fix xss issue in blame
| -rw-r--r-- | app/views/blame/show.html.haml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/app/views/blame/show.html.haml b/app/views/blame/show.html.haml index f85dde6dbbf..b2a45ef5303 100644 --- a/app/views/blame/show.html.haml +++ b/app/views/blame/show.html.haml @@ -38,11 +38,11 @@ - current_line += 1 - else - lines.each do |line| - :preserve - #{current_line} + = current_line + \ - current_line += 1 %td.lines %pre - lines.each do |line| - :preserve - #{line} + = line + \ |