Escaping in html email templates (#4874).

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3452 e93f8b46-1217-0410-a6f0-8f06a7374b81
2010-02-18 19:13:38 +00:00
parent d18fba4ffe
commit 026fbb99a6
10 changed files with 21 additions and 21 deletions
@@ -1,5 +1,5 @@
 <%= link_to @added_to, @added_to_url %><br />

 <ul><% @attachments.each do |attachment | %>
-<li><%= attachment.filename %></li>
+<li><%=h attachment.filename %></li>
 <% end %></ul>