[myexperiment-hackers] [3504] branches/wf4ever/app/views/packs/show.rhtml: changed description render to whitelist instead of HTML escape

[noreply]

Revision

3504

Author

dgc

Date

2013-04-11 23:28:58 +0000 (Thu, 11 Apr 2013)

Log Message

changed description render to whitelist instead of HTML escape

Modified Paths

• branches/wf4ever/app/views/packs/show.rhtml

Diff

Modified: branches/wf4ever/app/views/packs/show.rhtml (3503 => 3504)

--- branches/wf4ever/app/views/packs/show.rhtml	2013-04-11 23:28:06 UTC (rev 3503)
+++ branches/wf4ever/app/views/packs/show.rhtml	2013-04-11 23:28:58 UTC (rev 3504)
@@ -5,7 +5,7 @@
 <% remote_entries        = @version ? @version.remote_entries        : @pack.remote_entries        %>
 
 <% @title = @annotations.query([RDF::URI.parse(@pack.ro_uri), RDF::DC.title, nil]).objects.first if @pack.ro_uri; @title = @title.to_s if @title; @title ||= @pack.title %>
-<% @description_html = @annotations.query([RDF::URI.parse(@pack.ro_uri), RDF::DC.description, nil]).objects.first if @pack.ro_uri; @description_html = h(@description_html) if @description_html; @description_html ||= @pack.description_html %>
+<% @description_html = @annotations.query([RDF::URI.parse(@pack.ro_uri), RDF::DC.description, nil]).objects.first if @pack.ro_uri; @description_html = white_list(@description_html.to_s) if @description_html; @description_html ||= @pack.description_html %>
 
 <% if @authorised_to_edit %>
 	<ul class="sectionIcons">