mirror of
https://github.com/redmine/redmine.git
synced 2025-11-04 20:35:57 +01:00
Escape flash messages (#19117).
git-svn-id: http://svn.redmine.org/redmine/trunk@14016 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -293,7 +293,7 @@ class AccountController < ApplicationController
|
||||
token = Token.new(:user => user, :action => "register")
|
||||
if user.save and token.save
|
||||
Mailer.register(token).deliver
|
||||
flash[:notice] = l(:notice_account_register_done, :email => user.mail)
|
||||
flash[:notice] = l(:notice_account_register_done, :email => ERB::Util.h(user.mail))
|
||||
redirect_to signin_path
|
||||
else
|
||||
yield if block_given?
|
||||
|
||||
Reference in New Issue
Block a user