#907: escape branch name

2013-02-13 23:12:07 +04:00 · 2013-02-13 23:12:07 +04:00 · 2bcd874169
parent 7e165b8ba4
commit 2bcd874169
1 changed files with 1 additions and 1 deletions
--- a/app/views/projects/git/trees/_branch.html.haml
+++ b/app/views/projects/git/trees/_branch.html.haml
@ -7,4 +7,4 @@
        %li.text= t('layout.projects.base_branch')
      - else
        %li
-          = link_to t('layout.projects.compare'), diff_path(@project, "#{@branch.name}...#{branch.name}")
+          = link_to t('layout.projects.compare'), diff_path(@project, "#{CGI.escape(@branch.name)}...#{CGI.escape(branch.name)}")