Fixing TODOS.

app/models/deliverable.rb

@@ -20,7 +20,6 @@ class Deliverable < ActiveRecord::Base
     return self.progress - self.budget_ratio
   end
   
-  # TODO: mocked
   def spent
     0 
   end

lib/budget_issue_hook.rb

@@ -7,6 +7,7 @@ class BudgetIssueHook
 
   class Helper
     include Singleton
+    include ERB::Util
     include ActionView::Helpers::TagHelper
     include ActionView::Helpers::FormHelper
     include ActionView::Helpers::FormTagHelper
@@ -14,8 +15,7 @@ class BudgetIssueHook
   end
   
   def self.issue_show(context = { })
-    # TODO: Escape
-    data = "<td><b>Deliverable :</b></td><td>#{context[:issue].deliverable.subject unless context[:issue].deliverable.nil?}</td>"
+    data = "<td><b>Deliverable :</b></td><td>#{help.html_escape context[:issue].deliverable.subject unless context[:issue].deliverable.nil?}</td>"
     return "<tr>#{data}<td></td></tr>"
   end