fix xss issue in blame

c0da61c6 · Dmitriy Zaporozhets · de2c189e · c0da61c6
隐藏空白更改
内联并排

Showing with 4 addition and 4 deletion

app/views/blame/show.html.haml app/views/blame/show.html.haml +4 -4

未找到文件。
--- a/app/views/blame/show.html.haml
+++ b/app/views/blame/show.html.haml
@@ -38,11 +38,11 @@
                  - current_line += 1
                - else
                  - lines.each do |line|
-                    :preserve
-                      #{current_line}
+                    = current_line
+                    \
                    - current_line += 1
            %td.lines
              %pre
                - lines.each do |line|
-                  :preserve
-                    #{line}
+                  = line
+                  \