Files
fizzy/app/views/cards/display/public_preview/_meta.html.erb
T
Stanko Krtalić 0e2c7f7d4d Escape HTML everywhere where html_safe is used (#1114)
* Escape HTML everywhere where html_safe is used
* Mark search results as HTML safe at the attribute
2025-09-16 11:52:15 +02:00

33 lines
1.1 KiB
Plaintext

<div class="card__meta" id="<%= dom_id(card, :meta) %>">
<div class="card__meta-avatars card__meta-avatars--author">
<%= avatar_preview_tag card.creator %>
</div>
<span class="card__meta-text card__meta-text--added">
Added <%= local_datetime_tag(card.created_at, style: :daysago) %>
<% if card.drafted? %>
<strong>(Draft)</strong>
<% end %>
</span>
<span class="card__meta-text card__meta-text--author">
By <strong><%= card.creator.familiar_name %></strong>
</span>
<span class="card__meta-text card__meta-text--updated overflow-ellipsis">
Updated
<%= local_datetime_tag(card.last_active_at, style: :daysago) %>
</span>
<span class="card__meta-text card__meta-text--assignees overflow-ellipsis">
<%= "Assigned to" if card.assignees.any? %>
<%= card.assignees.map { |assignee| "<strong>#{h assignee.familiar_name}</strong>" }.to_sentence.html_safe %>
</span>
<div class="card__meta-avatars card__meta-avatars--assignees" id="<%= dom_id(card, :assignees) %>">
<% card.assignees.each do |assignee| %>
<%= avatar_preview_tag assignee %>
<% end %>
</div>
</div>