Invoke html_escape on the proper receiver

This commit is contained in:
Santiago Pastorino
2010-10-18 12:29:03 -02:00
parent 460c4efd71
commit 901973b4d7

View File

@@ -74,7 +74,7 @@ module ActionView
str << "+#{country_code}#{delimiter}" unless country_code.blank?
str << number
str << " x #{extension}" unless extension.blank?
html_escape(str)
ERB::Util.html_escape(str)
end
# Formats a +number+ into a currency string (e.g., $13.65). You can customize the format