norikra 0.0.19-java → 0.0.20-java

data/lib/norikra/version.rb

@@ -1,3 +1,3 @@
 module Norikra
-  VERSION = "0.0.19"
+  VERSION = "0.0.20"
 end

data/lib/norikra/webui/handler.rb

@@ -5,10 +5,12 @@ require 'norikra/logger'
 require 'norikra/webui'
 
 require 'sinatra/base'
+require 'erubis'
 
 class Norikra::WebUI::Handler < Sinatra::Base
   set :public_folder, File.absolute_path(File.join(File.dirname(__FILE__), '..', '..', '..', 'public'))
   set :views, File.absolute_path(File.join(File.dirname(__FILE__), '..', '..', '..', 'views'))
+  # set :erb, :escape_html => true # hmmm, this doesn't works...
 
   enable :sessions
 

data/views/index.erb

@@ -73,7 +73,7 @@
     <td>
       <button class="btn btn-default btn-xs show-query-expression"
         data-toggle="popover" data-placement="left" data-html="true"
-        data-content="<%= "query:<pre>" + query.expression + "</pre>" %>">show query</button>
+        data-content="query:<pre><%= escape_html query.expression %></pre>">show query</button>
     </td>
     <td><%= pool[query.name] %></td>
     <td>

metadata

@@ -2,7 +2,7 @@
 name: norikra
 version: !ruby/object:Gem::Version
   prerelease:
-  version: 0.0.19
+  version: 0.0.20
 platform: java
 authors:
 - TAGOMORI Satoshi