Escape project's name in cross project label

b3f533c3 · Grzegorz Bizon · fa639df5 · b3f533c3
Commit b3f533c3 authored Mar 05, 2016 by Grzegorz Bizon
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

app/helpers/labels_helper.rb app/helpers/labels_helper.rb +1 -1

No files found.
--- a/app/helpers/labels_helper.rb
+++ b/app/helpers/labels_helper.rb
@@ -65,7 +65,7 @@ module LabelsHelper

  def render_colored_cross_project_label(label)
    label_suffix = label.project.name_with_namespace
-    label_suffix = " <i>in #{label_suffix}</i>"
+    label_suffix = " <i>in #{escape_once(label_suffix)}</i>"
    render_colored_label(label, label_suffix)
  end