Merged r1503 from trunk.

git-svn-id: http://redmine.rubyforge.org/svn/branches/0.7-stable@1531 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/timelog/_report_criteria.rhtml

@@ -3,7 +3,7 @@
 <% next if hours_for_value.empty? -%>
 <tr class="<%= cycle('odd', 'even') %> <%= 'last-level' unless criterias.length > level+1 %>">
 <%= '<td></td>' * level %>
-<td><%= format_criteria_value(criterias[level], value) %></td>
+<td><%= h(format_criteria_value(criterias[level], value)) %></td>
 <%= '<td></td>' * (criterias.length - level - 1) -%>
   <% total = 0 -%>
   <% @periods.each do |period| -%>