Javi Martín 391f58eb90 Sanitize dashboard action before displaying it ...

We were using `<%==`, which is the same as using `raw`.

Note ERB Lint doesn't warn us of this usage. Brakeman does warn us,
though.

2019-10-08 19:10:14 +02:00

..

assets

Moderate legislation proposals (#3602)

2019-10-05 04:02:39 +02:00

controllers

Remove unnecessary html_safe in paths

2019-10-08 13:20:22 +02:00

helpers

Use safe_join instead of <%==

2019-10-08 19:10:14 +02:00

mailers

Remove unused block parameters

2019-10-05 15:03:25 +02:00

models

Split Poll::Booth.search in two methods

2019-10-07 14:30:39 +02:00

views

Sanitize dashboard action before displaying it

2019-10-08 19:10:14 +02:00