escaping

18 years ago · 3defdd7fc8
parent 0016397a89
commit 3defdd7fc8
1 changed files with 1 additions and 1 deletions
--- a/app/views/users/dashboard.html.haml
+++ b/app/views/users/dashboard.html.haml
@ -22,7 +22,7 @@
            = link_to(h(n.course.full_name), course_url(n.course)) + " &rsaquo;"
            = link_to(h(n.title), course_news_url(n.course, n))
            - unless n.body.empty?
-              %p= truncate(n.body, 300)
+              %p= truncate(h(n.body), 300)

  .box
    .cmd