diff options
author | Douwe Maan <douwe@selenight.nl> | 2018-02-15 12:06:57 +0100 |
---|---|---|
committer | Douwe Maan <douwe@selenight.nl> | 2018-02-15 12:07:03 +0100 |
commit | bed60b8c47acd11569da7cf5dc5bdb545ac97784 (patch) | |
tree | 9f9e76dd1b1fec8b00a98fe2a282c82e670d7069 /lib | |
parent | 2b3313697f370d31abdda4177701ba20b66ba3e6 (diff) | |
download | gitlab-ce-bed60b8c47acd11569da7cf5dc5bdb545ac97784.tar.gz |
Escape HTML entities in commit messages
Diffstat (limited to 'lib')
-rw-r--r-- | lib/banzai/filter/html_entity_filter.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/banzai/filter/html_entity_filter.rb b/lib/banzai/filter/html_entity_filter.rb index f3bd587c28b..e008fd428b0 100644 --- a/lib/banzai/filter/html_entity_filter.rb +++ b/lib/banzai/filter/html_entity_filter.rb @@ -5,7 +5,7 @@ module Banzai # Text filter that escapes these HTML entities: & " < > class HtmlEntityFilter < HTML::Pipeline::TextFilter def call - ERB::Util.html_escape_once(text) + ERB::Util.html_escape(text) end end end |