TODO.rtf
@@ -13,7 +13,8 @@ module ApplicationHelper
text.gsub!(/\[term\](.*?)\[\/term\]/mi) { "<span class='term'>" << $1.gsub(/^\r\n/,"").gsub("<","<").gsub(">",">") << "</span>" }
text.gsub!(/\[url=["']?(.*?)["']?\](.*?)\[\/url\]/mis) { "<a href='" << $1 << "'>" << $2 << "</a>" }
text.gsub!(/\[topic=["']?(.*?)["']?\](.*?)\[\/topic\]/mis) { "<a href='/topics/show/" << $1 << "'>" << $2 << "</a>" }
-
+ text.gsub!(/</, "<")
+ text.gsub!(/>/, ">")
text
# handle with care...
app/helpers/application_helper.rb
@@ -23,7 +23,7 @@ DEFAULT_STYLESHEET = 1
PER_PAGE = 30
TIME_DISPLAY = "%d %B %Y %I:%M:%S%P"
DATE_DISPLAY = "%d %B %Y"
-RAILS_RELATIVE_URL_ROOT = "http://localhost:3000"
+RAILS_RELATIVE_URL_ROOT = "http://localhost"
#for some reason it doesn't automatically detect the admin's application controller.
Admin::ApplicationController
config/environment.rb
e7e5bdafb7ee0b10ed4e340cbe875c86713f3e01
Ryan Bigg
radarlistener@gmail.com
http://github.com/radar/rboard/commit/5b59be4b6bb00acadd6ebbfaa5bd78f80fc09058
5b59be4b6bb00acadd6ebbfaa5bd78f80fc09058
2008-10-06T19:33:41-07:00
2008-10-06T19:33:41-07:00
Escape tags inside posts better.
b826e59bc371332a929984d16f96226040ce3904
Ryan Bigg
radarlistener@gmail.com