summaryrefslogtreecommitdiff
path: root/app/views/projects/graphs/charts.html.haml
diff options
context:
space:
mode:
authorImre Farkas <ifarkas@gitlab.com>2018-06-18 15:29:27 +0200
committerImre Farkas <ifarkas@gitlab.com>2018-06-19 12:16:07 +0200
commit6207a2de89c68eaa8d284116a6e790feb55ee65e (patch)
treecb39023ae65283e1d112aa3047f7b4cf7f63789f /app/views/projects/graphs/charts.html.haml
parent4be23eeae376ede50905b741f88b089b1669b07f (diff)
downloadgitlab-ce-6207a2de89c68eaa8d284116a6e790feb55ee65e.tar.gz
HTML escape branch name in project graphs page
Diffstat (limited to 'app/views/projects/graphs/charts.html.haml')
-rw-r--r--app/views/projects/graphs/charts.html.haml2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/views/projects/graphs/charts.html.haml b/app/views/projects/graphs/charts.html.haml
index 983cb187c2f..3f1974d05f4 100644
--- a/app/views/projects/graphs/charts.html.haml
+++ b/app/views/projects/graphs/charts.html.haml
@@ -30,7 +30,7 @@
#{@commits_graph.start_date.strftime('%b %d')}
- end_time = capture do
#{@commits_graph.end_date.strftime('%b %d')}
- = (_("Commit statistics for %{ref} %{start_time} - %{end_time}") % { ref: "<strong>#{@ref}</strong>", start_time: start_time, end_time: end_time }).html_safe
+ = (_("Commit statistics for %{ref} %{start_time} - %{end_time}") % { ref: "<strong>#{h @ref}</strong>", start_time: start_time, end_time: end_time }).html_safe
.col-md-6
.tree-ref-container