dice/impress
1
0
Fork 0
forked from OpenNeo/impress
Code Pull requests Activity

xss vulnerability in empty search results page

Browse source
This commit is contained in:
Emi Matchu 2011-05-13 08:20:09 -04:00
parent c23024b43a
commit 1b3669178c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/views/items/index.html.haml
View file

@ -2,7 +2,7 @@
- title "Searching Infinite Closet for \"#{@query}\""
- if @items.empty?
:markdown
We couldn't find any wearables that matched **#{@query}**. Sorry!
We couldn't find any wearables that matched **#{h @query}**. Sorry!
Are we missing something? To add an item to our database, just
[show us a pet who is wearing it][1]. That's it!