# HG changeset patch
# User Marcin Kuzminski <marcin@rhodecode.com>
# Date 2017-12-11 21:10:23
# Node ID c5bccf3633a33e504f8251947dc02baa3c95638f
# Parent  9ef21084078966cfa375469a9b7f615688d235ed

issue-tracker: fix prefix to be escaped as well as the url pattern.

diff --git a/rhodecode/model/settings.py b/rhodecode/model/settings.py
--- a/rhodecode/model/settings.py
+++ b/rhodecode/model/settings.py
@@ -349,8 +349,8 @@ class IssueTrackerSettingsModel(object):
                     self._get_keyname('pat', uid, 'rhodecode_')),
                 'url': bleach.clean(
                     qs.get(self._get_keyname('url', uid, 'rhodecode_')) or ''),
-                'pref': qs.get(
-                    self._get_keyname('pref', uid, 'rhodecode_')),
+                'pref': bleach.clean(
+                    qs.get(self._get_keyname('pref', uid, 'rhodecode_')) or ''),
                 'desc': qs.get(
                     self._get_keyname('desc', uid, 'rhodecode_')),
             })