roles.yml in zena-1.2.3

- old
+ new

@@ -8,11 +8,11 @@
   res: "simple text"
 
 
 show_property_filter_vclass:
   src: "<r:Letter? do='paper'/>"
-  tem: "<% if @node.kpath_match?('NNL') %><%= @node.prop['paper'] %><% end %>"
+  tem: "<% if @node.kpath_match?('NNL') %><%=h @node.prop['paper'] %><% end %>"
 
 show_property_filter_role_no_role:
   src: "<r:Original?>Has an origin</r:Original?>"
   res: ''
 
@@ -57,16 +57,16 @@
 
 vclass_name:
   context:
     node: letter
   src: "<r:vclass do='name'/>"
-  tem: "<% var1 = @node.virtual_class %><%= var1.name %>"
+  tem: "<% var1 = @node.virtual_class %><%=h var1.name %>"
   res: "Letter"
 
 vclass_icon:
   src: " <r:Letter do='icon'/>"
-  tem: "<% if var1 = VirtualClass[\"Letter\"] %> <%= var1.prop['icon'] %><% end %>"
+  tem: "<% if var1 = VirtualClass[\"Letter\"] %> <%=h var1.prop['icon'] %><% end %>"
   res: " /images/page.png"
 
 vclass_img:
   context:
     node: letter
@@ -87,11 +87,11 @@
   src: "<r:vclass do='roles' do='each' join=', '><r:name/> (<r:columns do='size'/>)</r:vclass>"
   res: "Node (3), Original (4), Task (1), Letter (3)"
 
 vclass_context:
   src: "<r:Image><r:name/></r:Image>"
-  tem: "<% if var1 = VirtualClass[\"Image\"] %><%= var1.name %><% end %>"
+  tem: "<% if var1 = VirtualClass[\"Image\"] %><%=h var1.name %><% end %>"
   res: "Image"
 
 vclass_scope:
   context:
     node: bird_jpg
@@ -99,11 +99,11 @@
   tem: "<% if @node.kpath_match?('NDI') %>I am an image<% end %>"
   res: "I am an image"
 
 vclass_in_rubyless:
   src: "<b do='Contact.name'/>"
-  tem: "<b><%= (VirtualClass[\"Contact\"] ? VirtualClass[\"Contact\"].name : nil) %></b>"
+  tem: "<b><%=h (VirtualClass[\"Contact\"] ? VirtualClass[\"Contact\"].name : nil) %></b>"
   res: "<b>Contact</b>"
 
 grid_manual:
   src: |
     <table do='images in site'>
@@ -135,6 +135,6 @@
       <h3 do='rel'/>
       <ul do='query' default='nodes' select='#{rel}s'>
         <li do='each' do='link'/>
       </ul>
     </r:Template>
-  tem: '/<h3><%= _zrel %></h3>/'
+  tem: '/<h3><%=h _zrel %></h3>/'
\ No newline at end of file