Commit af29ed37 authored by Josh Frye's avatar Josh Frye

Escape!

parent 52c934a8
...@@ -3,7 +3,7 @@ module EventsHelper ...@@ -3,7 +3,7 @@ module EventsHelper
author = event.author author = event.author
if author if author
link_to author.name, user_path(author.username), title: author.name link_to author.name, user_path(author.username), title: h(author.name)
else else
event.author_name event.author_name
end end
...@@ -159,7 +159,7 @@ module EventsHelper ...@@ -159,7 +159,7 @@ module EventsHelper
link_to( link_to(
namespace_project_commit_path(event.project.namespace, event.project, namespace_project_commit_path(event.project.namespace, event.project,
event.note_commit_id, event.note_commit_id,
anchor: dom_id(event.target), title: event.target_title), anchor: dom_id(event.target), title: h(event.target_title)),
class: "commit_short_id" class: "commit_short_id"
) do ) do
"#{event.note_target_type} #{event.note_short_commit_id}" "#{event.note_target_type} #{event.note_short_commit_id}"
...@@ -167,11 +167,11 @@ module EventsHelper ...@@ -167,11 +167,11 @@ module EventsHelper
elsif event.note_project_snippet? elsif event.note_project_snippet?
link_to(namespace_project_snippet_path(event.project.namespace, link_to(namespace_project_snippet_path(event.project.namespace,
event.project, event.project,
event.note_target), title: event.project.name) do event.note_target), title: h(event.project.name)) do
"#{event.note_target_type} #{truncate event.note_target.to_reference}" "#{event.note_target_type} #{truncate event.note_target.to_reference}"
end end
else else
link_to event_note_target_path(event), title: event.note_target.to_reference do link_to event_note_target_path(event), title: h(event.note_target.to_reference) do
"#{event.note_target_type} #{truncate event.note_target.to_reference}" "#{event.note_target_type} #{truncate event.note_target.to_reference}"
end end
end end
......
...@@ -8,7 +8,7 @@ module ProjectsHelper ...@@ -8,7 +8,7 @@ module ProjectsHelper
end end
def link_to_project(project) def link_to_project(project)
link_to [project.namespace.becomes(Namespace), project], title: project.name do link_to [project.namespace.becomes(Namespace), project], title: h(project.name) do
title = content_tag(:span, project.name, class: 'project-name') title = content_tag(:span, project.name, class: 'project-name')
if project.namespace if project.namespace
......
...@@ -3,7 +3,7 @@ ...@@ -3,7 +3,7 @@
.event-last-push .event-last-push
.event-last-push-text .event-last-push-text
%span You pushed to %span You pushed to
= link_to namespace_project_commits_path(event.project.namespace, event.project, event.ref_name), title: event.project.name do = link_to namespace_project_commits_path(event.project.namespace, event.project, event.ref_name), title: h(event.project.name) do
%strong= event.ref_name %strong= event.ref_name
%span at %span at
%strong= link_to_project event.project %strong= link_to_project event.project
......
...@@ -4,7 +4,7 @@ ...@@ -4,7 +4,7 @@
= event_action_name(event) = event_action_name(event)
- if event.target - if event.target
%strong= link_to event.target.to_reference, [event.project.namespace.becomes(Namespace), event.project, event.target], title: event.target.to_reference %strong= link_to event.target.to_reference, [event.project.namespace.becomes(Namespace), event.project, event.target]
= event_preposition(event) = event_preposition(event)
......
...@@ -5,7 +5,7 @@ ...@@ -5,7 +5,7 @@
%strong= event.ref_name %strong= event.ref_name
- else - else
%strong %strong
= link_to event.ref_name, namespace_project_commits_path(event.project.namespace, event.project, event.ref_name), title: event.target_title = link_to event.ref_name, namespace_project_commits_path(event.project.namespace, event.project, event.ref_name), title: h(event.target_title)
at at
= link_to_project event.project = link_to_project event.project
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment