html escape title in refinery_help_tag

refinery · Feb 8, 2016 · ed05cf9 · ed05cf9 · fgeek · Feb 20, 2016
1 parent 1f81b96
commit ed05cf9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/core/app/helpers/refinery/tag_helper.rb b/core/app/helpers/refinery/tag_helper.rb
@@ -5,7 +5,8 @@ module TagHelper
 
     # Remember to wrap your block with <span class='label_with_help'></span> if you're using a label next to the help tag.
     def refinery_help_tag(title='Tip')
-      action_icon(:info, '#', title.html_safe? ? title : h(title), {tooltip: title})
+      title = title.html_safe? ? title : h(title)
+      action_icon(:info, '#', title, {tooltip: title})
     end
 
     # This is just a quick wrapper to render an image tag that lives inside refinery/icons.