1
0
mirror of https://github.com/meineerde/redmine.git synced 2026-01-05 15:11:31 +00:00
redmine/app/views/welcome/index.rhtml
Jean-Philippe Lang 2b86ef8e28 various modifications to prevent xss
- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81
2006-12-17 08:10:18 +00:00

24 lines
673 B
Plaintext

<h2><%= $RDM_WELCOME_TITLE || l(:label_home) %></h2>
<div class="splitcontentleft">
<% if $RDM_WELCOME_TEXT %><p><%= $RDM_WELCOME_TEXT %></p><br /><% end %>
<div class="box">
<h3><%=l(:label_news_latest)%></h3>
<%= render :partial => 'news/news', :collection => @news %>
</div>
</div>
<div class="splitcontentright">
<div class="box">
<h3><%=l(:label_project_latest)%></h3>
<ul>
<% for project in @projects %>
<li>
<%= link_to project.name, :controller => 'projects', :action => 'show', :id => project %> (<%= format_time(project.created_on) %>)<br />
<%=h project.description %>
</li>
<% end %>
</ul>
</div>
</div>