tiss2go/app/views/crawlers/projects_crawler/show_detail.html.erb
Tobias Eidelpes c9f93d6fd8 Do not parse HTML
Might allow an attacker (in this case someone creating a course in TISS)
to do some nasty HTML injection. But eeeh, who cares? ¯\_(ツ)_/¯
2020-05-27 20:07:04 +02:00

15 lines
515 B
Plaintext

<% if @project != nil %>
<h2><%= @project['titleDe'] %></h2>
<h5><%= @project['contractBegin'] %> - <%= @project['contractEnd'] %></h5>
<%= button_to 'Add to favorites', action: :add_to_fav, id: @id, title: @project['titleDe'] %>
<% if @project['abstractDe'] != nil %>
<h4>Beschreibung</h4>
<p><%= raw @project['abstractDe'] %></p>
<% else %>
<% if @project['abstractEn'] != nil %>
<h4>Beschreibung</h4>
<p><%= raw @project['abstractEn'] %></p>
<% end %>
<% end %>
<% end %>