From ffe15c436bf2c6fb70303f76659007136fb611d6 Mon Sep 17 00:00:00 2001
From: Juanfran <juanfran.alcantara@kaleidos.net>
Date: Fri, 31 Oct 2014 13:55:28 +0100
Subject: [PATCH] fix history xss

---
 app/coffee/modules/common/history.coffee | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/app/coffee/modules/common/history.coffee b/app/coffee/modules/common/history.coffee
index 5918f71c..f817d87b 100644
--- a/app/coffee/modules/common/history.coffee
+++ b/app/coffee/modules/common/history.coffee
@@ -84,11 +84,11 @@ HistoryDirective = ($log, $loading) ->
         <div class="activity-fromto">
             <p>
                 <strong> from </strong> <br />
-                <span><%= point[0] %></span>
+                <span><%- point[0] %></span>
             </p>
             <p>
                 <strong> to </strong> <br />
-                <span><%= point[1] %></span>
+                <span><%- point[1] %></span>
             </p>
         </div>
     </div>
@@ -103,11 +103,11 @@ HistoryDirective = ($log, $loading) ->
         <div class="activity-fromto">
             <p>
                 <strong> from </strong> <br />
-                <span><%= from %></span>
+                <span><%- from %></span>
             </p>
             <p>
                 <strong> to </strong> <br />
-                <span><%= to %></span>
+                <span><%- to %></span>
             </p>
         </div>
     </div>
@@ -121,11 +121,11 @@ HistoryDirective = ($log, $loading) ->
             <% _.each(diff, function(change) { %>
                 <p>
                     <strong><%= change.name %> from </strong> <br />
-                    <span><%= change.from %></span>
+                    <span><%- change.from %></span>
                 </p>
                 <p>
                     <strong><%= change.name %> to </strong> <br />
-                    <span><%= change.to %></span>
+                    <span><%- change.to %></span>
                 </p>
             <% }) %>
         </div>