summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorDouwe Maan <douwe@selenight.nl>2018-02-15 12:06:57 +0100
committerDouwe Maan <douwe@selenight.nl>2018-02-15 12:07:03 +0100
commitbed60b8c47acd11569da7cf5dc5bdb545ac97784 (patch)
tree9f9e76dd1b1fec8b00a98fe2a282c82e670d7069 /lib
parent2b3313697f370d31abdda4177701ba20b66ba3e6 (diff)
downloadgitlab-ce-bed60b8c47acd11569da7cf5dc5bdb545ac97784.tar.gz
Escape HTML entities in commit messages
Diffstat (limited to 'lib')
-rw-r--r--lib/banzai/filter/html_entity_filter.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/banzai/filter/html_entity_filter.rb b/lib/banzai/filter/html_entity_filter.rb
index f3bd587c28b..e008fd428b0 100644
--- a/lib/banzai/filter/html_entity_filter.rb
+++ b/lib/banzai/filter/html_entity_filter.rb
@@ -5,7 +5,7 @@ module Banzai
# Text filter that escapes these HTML entities: & " < >
class HtmlEntityFilter < HTML::Pipeline::TextFilter
def call
- ERB::Util.html_escape_once(text)
+ ERB::Util.html_escape(text)
end
end
end