[ARVADOS] updated: 4399b6076b08dce2e65a5ebbc3025d95c2da059a

[git at public.curoverse.com]

Summary of changes:
 apps/workbench/app/helpers/application_helper.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

       via  4399b6076b08dce2e65a5ebbc3025d95c2da059a (commit)
      from  1b7d63584a81df79420030668bdcdcc23e6bd9f3 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 4399b6076b08dce2e65a5ebbc3025d95c2da059a
Author: Brett Smith <brett at curoverse.com>
Date:   Tue May 20 15:34:07 2014 -0400

    2753: HTML-escape provided button text.

diff --git a/apps/workbench/app/helpers/application_helper.rb b/apps/workbench/app/helpers/application_helper.rb
index f363fb4..720173c 100644
--- a/apps/workbench/app/helpers/application_helper.rb
+++ b/apps/workbench/app/helpers/application_helper.rb
@@ -290,7 +290,7 @@ module ApplicationHelper
     params[:class] ||= 'btn btn-xs btn-default'
     list[0...show_max].each { |item| yield item }
     unless list[show_max].nil?
-      link_to(button_text +
+      link_to(h(button_text) +
               raw('   <i class="fa fa-fw fa-arrow-circle-right"></i>'),
               button_href, params, *rest)
     end

-----------------------------------------------------------------------


hooks/post-receive
--