Escape ampersands properly.

marnen · Jan 7, 2009 · 5d64f37 · 5d64f37
1 parent acfcdab
commit 5d64f37
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/helpers/events_helper.rb b/app/helpers/events_helper.rb
@@ -92,7 +92,7 @@ def info(event)
     from = User.current_user.address_for_geocoding.nil? ? nil : "saddr=#{u User.current_user.address_for_geocoding}"
     to = event.address_for_geocoding.nil? ? nil : "daddr=#{u event.address_for_geocoding}"
     params = [from, to].compact.join('&')
-    result << content_tag(:p, link_to(_('Get directions'), "#{gmaps}?#{params}"))
+    result << content_tag(:p, link_to(_('Get directions'), h("#{gmaps}?#{params}")))
     content_tag(:div, result, :id => :info)
   end