From 36fb2bb7860be943dec5e4ad774b740951fe4ece Mon Sep 17 00:00:00 2001 From: Alexander Meindl Date: Thu, 11 May 2017 09:26:19 +0200 Subject: [PATCH] no escape has been fixed --- app/models/messenger.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/models/messenger.rb b/app/models/messenger.rb index f2a5cae..e991176 100644 --- a/app/models/messenger.rb +++ b/app/models/messenger.rb @@ -119,7 +119,7 @@ class Messenger def self.detail_to_field(detail) field_format = nil key = nil - escape = yes + escape = true if detail.property == 'cf' key = CustomField.find(detail.prop_key).name rescue nil @@ -167,11 +167,11 @@ class Messenger when 'attachment' attachment = Attachment.find(detail.prop_key) value = "<#{Messenger.object_url attachment}|#{ERB::Util.html_escape(attachment.filename)}>" if attachment.present? - escape = no + escape = false when 'parent' issue = Issue.find(detail.value) value = "<#{Messenger.object_url issue}|#{ERB::Util.html_escape(issue)}>" if issue.present? - escape = no + escape = false end if detail.property == 'cf' && field_format == 'version'