1
0
mirror of https://github.com/meineerde/redmine.git synced 2026-01-21 14:52:59 +00:00
redmine/app/views/my/blocks/_documents.rhtml
Jean-Philippe Lang 2b86ef8e28 various modifications to prevent xss
- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81
2006-12-17 08:10:18 +00:00

7 lines
373 B
Plaintext

<h3><%=l(:label_document_plural)%></h3>
<%= render(:partial => 'documents/document',
:collection => Document.find(:all,
:limit => 10,
:conditions => "documents.project_id in (#{@user.projects.collect{|m| m.id}.join(',')})",
:include => [:project])) unless @user.projects.empty? %>