Problem:
========
When logged in, the summary of the following ticket (that contains <script> and <style>) is HTML-quoted
properly:
http://rubyforge.org/tracker/index.php?func=detail&aid=27311&group_id=1716&atid=6686
However, when logged out, the HTML-quoting does not happen, breaking the page.
Steps to reproduce:
===================
1) Submit a new tracker entry that contains "<script>" in the summary
2) Log out
3) Access the entry page
Expected behavior:
==================
The HTML quoting of the summary should happen whether the user is logged-in or browsing anonymously. |