oops, omitted a couple important features/vulnerabilities

2014-09-11 11:13:15 -04:00
parent a50cad0cf3
commit 7e38ac845f
2 changed files with 3 additions and 3 deletions
@@ -26,7 +26,7 @@
    going on with funny chars and jquery, plus it says safe so I'm guessing
    nothing bad will happen
    -->
-    Welcome, <%= current_user.first_name %>
+    Welcome, <%= current_user.first_name.html_safe %>
     </li>
     <li>
    <%= button_to "RailsGoat Tutorials", tutorials_path, {:class => "btn btn-primary", :method => "get"}%>