Escape project's name in cross project label

b3f533c3 · Grzegorz Bizon · fa639df5 · b3f533c3
Commit b3f533c3 authored 9 years ago by Grzegorz Bizon
--- a/app/helpers/labels_helper.rb
+++ b/app/helpers/labels_helper.rb
@@ -65,7 +65,7 @@ module LabelsHelper
  
  def render_colored_cross_project_label(label)
    label_suffix = label.project.name_with_namespace
-    label_suffix = " <i>in #{label_suffix}</i>"
+    label_suffix = " <i>in #{escape_once(label_suffix)}</i>"
    render_colored_label(label, label_suffix)
  end