html_safe on methods in diff_helper [#174]

app/helpers/diff_helper.rb

@@ -27,11 +27,11 @@ def render_diffs(diffs)
         out << "</h4>"
         out << force_utf8(render_diff(file.diff))
         out
-      end.join("\n")
+      end.join("\n").html_safe
     else
-      '<div class="clear"></div><div id="commit-diff-container">' +
+      ('<div class="clear"></div><div id="commit-diff-container">' +
         render_inline_diffs_controls("commits") +
-        render_inline_diffs_with_stats(diffs, :open) + "</div>"
+        render_inline_diffs_with_stats(diffs, :open) + "</div>").html_safe
     end
   end
 
@@ -58,7 +58,7 @@ def render_inline_diffs_with_stats(file_diffs, state = :closed)
       end
       out << "</div></div>"
       out
-    end.join("\n")
+    end.join("\n").html_safe
   end
 
   def render_inline_diffs_controls(cookie_prefix)
@@ -86,7 +86,7 @@ def render_inline_diff(udiff, differ = nil, options = {})
       out << differ.render(Gitorious::Diff::InlineTableCallback.new)
     end
     out << "</table>"
-    out
+    out.html_safe
   end
 
   def render_sidebyside_diff(udiff)
@@ -112,7 +112,7 @@ def render_diffmode_selector
       out << %Q{<li><a href="?diffmode=sidebyside">side by side</a></li>}
     end
     out << "</ul>"
-    out
+    out.html_safe
   end
 
   def render_diff_stats(stats)
@@ -124,7 +124,7 @@ def render_diff_stats(stats)
       out << %Q{</li>}
     end
     out << "</ul>\n"
-    out
+    out.html_safe
   end
 
   def render_compact_diff_stats(stats)