diff options
author | Douwe Maan <douwe@gitlab.com> | 2015-12-24 23:36:33 +0300 |
---|---|---|
committer | Douwe Maan <douwe@gitlab.com> | 2015-12-24 23:36:33 +0300 |
commit | 37993d39577058d5c76ef9c35e40d1c8f9aa7982 (patch) | |
tree | d2638832d63840d4cf58900c0df7b7091725a430 /lib/banzai/filter/user_reference_filter.rb | |
parent | e3befaed82f9aa52c79a1d4c437fe4fc63f8d07a (diff) |
Escape all the things.
Diffstat (limited to 'lib/banzai/filter/user_reference_filter.rb')
-rw-r--r-- | lib/banzai/filter/user_reference_filter.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/banzai/filter/user_reference_filter.rb b/lib/banzai/filter/user_reference_filter.rb index 67c24faf991..7f302d51dd7 100644 --- a/lib/banzai/filter/user_reference_filter.rb +++ b/lib/banzai/filter/user_reference_filter.rb @@ -122,7 +122,7 @@ module Banzai end def link_tag(url, data, text) - %(<a href="#{url}" #{data} class="#{link_class}">#{text}</a>) + %(<a href="#{url}" #{data} class="#{link_class}">#{escape_once(text)}</a>) end end end |