1
0
mirror of https://github.com/meineerde/redmine.git synced 2025-12-25 18:01:14 +00:00
redmine/app/views/issues/_list_simple.rhtml
Jean-Philippe Lang 2b86ef8e28 various modifications to prevent xss
- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81
2006-12-17 08:10:18 +00:00

28 lines
981 B
Plaintext

<% if issues.length > 0 %>
<table cellspacing="0" cellpadding="1" width="100%" border="0" class="listTable">
<tr><td>
<table class="listTableContent">
<tr class="ListHead">
<th>#</th>
<th><%=l(:field_tracker)%></th>
<th><%=l(:field_subject)%></th>
</tr>
<% for issue in issues %>
<tr class="<%= cycle("odd", "even") %>">
<td align="center" style="font-weight:bold;color:#<%= issue.status.html_color %>;">
<%= link_to issue.id, :controller => 'issues', :action => 'show', :id => issue %><br />
</td>
<td><p class="small"><%= issue.project.name %> - <%= issue.tracker.name %><br />
<%= issue.status.name %> - <%= format_time(issue.updated_on) %></p></td>
<td>
<p class="small"><%= link_to h(issue.subject), :controller => 'issues', :action => 'show', :id => issue %></p>
</td>
</tr>
<% end %>
</table>
</td>
</tr>
</table>
<% else %>
<i><%=l(:label_no_data)%></i>
<% end %>