fix(ui): fix unescaped pacticipant name and main branch in details an…

…d network pages
pact-foundation · May 13, 2022 · b8b1d30 · b8b1d30
1 parent 5c6f176
commit b8b1d30
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/pact_broker/ui/views/groups/show.html.erb b/lib/pact_broker/ui/views/groups/show.html.erb
@@ -6,7 +6,7 @@
 <html lang="en">
 <head>
 <meta charset="utf-8">
-<title><%= pacticipant_name %></title>
+<title><%= escape_html(pacticipant_name) %></title>
 <link rel='shortcut icon' href='<%= base_url %>/favicon.ico' type='image/x-icon'/>
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <meta name="description" content="">
@@ -69,7 +69,7 @@ svg{
         Main branch:
       </div>
       <div class="col col-md-6">
-        <%= pacticipant.main_branch %>
+        <%= escape_html(pacticipant.main_branch) %>
       </div>
     </div>
     <div class="row">