From 7c8e70c30eb4c81b094cdd77d8b350d030b1bada Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Karel=20Pi=C4=8Dman?= Date: Tue, 23 May 2023 07:35:28 +0200 Subject: [PATCH] safe_join instead of html_safe --- app/helpers/dmsf_folder_permissions_helper.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/helpers/dmsf_folder_permissions_helper.rb b/app/helpers/dmsf_folder_permissions_helper.rb index 4c68766e..3ff2a3ba 100644 --- a/app/helpers/dmsf_folder_permissions_helper.rb +++ b/app/helpers/dmsf_folder_permissions_helper.rb @@ -22,13 +22,13 @@ # Folders permissions helper module DmsfFolderPermissionsHelper def users_checkboxes(users, inherited: false) - s = +'' + s = [] id = inherited ? 'inherited_permissions[user_ids][]' : 'permissions[user_ids][]' users.each do |user| content = check_box_tag(id, user.id, true, disabled: inherited, id: nil) + user.name s << content_tag(:label, content, id: "user_permission_ids_#{user.id}", class: 'inline') end - s + safe_join s end def render_principals_for_new_folder_permissions(users)