Emergya/redmine_allocation — pull request #12 by thegcat (2013-03-25 14:48:26+00:00)
Title: Prevent possible XSS attack vectors

Note: the `h`-escapes are not necessary needed in the `html_title` because the base layout already `h`-escapes the `html_title`, but better be sure should this change in the future.