summaryrefslogtreecommitdiff
path: root/app
diff options
context:
space:
mode:
authorDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2013-04-03 16:31:28 +0300
committerDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2013-04-03 16:31:28 +0300
commit921151d0414512df79f0724e0a52af6ab96108d1 (patch)
tree6c6f60c2ce02fa54c6ffea33a430633b97a168b0 /app
parent4bbe2b74a85793c06679851706633cbee87ff8ca (diff)
downloadgitlab-ce-921151d0414512df79f0724e0a52af6ab96108d1.tar.gz
strip tags from user profile
Diffstat (limited to 'app')
-rw-r--r--app/controllers/profiles_controller.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/profiles_controller.rb b/app/controllers/profiles_controller.rb
index 6fa114a4194..f0d69f11184 100644
--- a/app/controllers/profiles_controller.rb
+++ b/app/controllers/profiles_controller.rb
@@ -75,7 +75,7 @@ class ProfilesController < ApplicationController
# validation for this fields
%w(name skype linkedin twitter bio).each do |attr|
value = user_attributes[attr]
- user_attributes[attr] = sanitize(value) if value.present?
+ user_attributes[attr] = sanitize(strip_tags(value)) if value.present?
end
user_attributes