diff options
| author |   Alex Legler <alex@a3li.li> | 2014-05-11 14:27:46 +0200 |
|---|---|---|
| committer | Alex Legler <alex@a3li.li> | 2014-05-11 14:27:46 +0200 |
| commit | f0d15536b2d11ac26ae1728399687e42ea68237f (patch) | |
| tree | 474694a137e1893c7df28145283e3eb1b0bbc203 | |
| parent | Another stab at that (diff) | |
| download | glsamaker-f0d15536b2d11ac26ae1728399687e42ea68237f.tar.gz glsamaker-f0d15536b2d11ac26ae1728399687e42ea68237f.tar.bz2 glsamaker-f0d15536b2d11ac26ae1728399687e42ea68237f.zip | |
Don't overescape template contents
| -rw-r--r-- | app/views/tools/template.js.erb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/tools/template.js.erb b/app/views/tools/template.js.erb index d4a87ad..77fabdb 100644 --- a/app/views/tools/template.js.erb +++ b/app/views/tools/template.js.erb @@ -1,7 +1,7 @@ <% if @error.nil? -%> GLSAMaker.editing.templates.close($('templates-<%= @target %>')); var target = $('<%= @target %>'); -target.setValue(target.getValue() + "<%= escape_javascript(@template.text) %>"); +target.setValue(target.getValue() + "<%= escape_javascript(@template.text).html_safe %>"); <% else -%> alert("<%= escape_javascript(@error) %>"); -<% end -%>
\ No newline at end of file +<% end -%> |