Skip to content

Commit

Permalink
Merge pull request #716 from forced-request/xssFix
Browse files Browse the repository at this point in the history
Fixed XSS vulnerability within bootstrap_flash that was occuring by call...
  • Loading branch information
seyhunak committed Mar 25, 2014
2 parents 965ebd3 + 7fe8f1c commit 663760e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion app/helpers/bootstrap_flash_helper.rb
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ def bootstrap_flash
Array(message).each do |msg|
text = content_tag(:div,
content_tag(:button, raw("×"), :class => "close", "data-dismiss" => "alert") +
msg.html_safe, :class => "alert fade in alert-#{type}")
msg, :class => "alert fade in alert-#{type}")
flash_messages << text if msg
end
end
Expand Down

0 comments on commit 663760e

Please sign in to comment.