<div class="activity-card">
  <div class="row">
    <div class="col-xs-12">
      <% if activity.old_activity?  %>
        <%= activity.message %>
      <% else %>
        <%= generate_activity_content(activity) %>
      <% end %>
    </div>
  </div>
  <div class="pull-left activity-timestamp">
    <%= activity.created_at.strftime('%H:%M') %>
  </div>
  <div class="row navigational-breadcrumbs">
  <% unless activity.old_activity? %>
    <% if activity.subject_type.present? %>
      <%= render partial: "global_activities/references/#{activity.subject_type.underscore}.html.erb",
                 locals: { team: activity.team, subject: activity.subject, breadcrumbs: activity.breadcrumbs } %>
    <% end %>
  <% end %>
  </div>
</div>

<div class="activity-card">
  <div class="row">
    <div class="col-xs-12">
      <% if activity.old_activity?  %>
        <%= sanitize_input activity.message %>
      <% else %>
        <%= generate_activity_content(activity) %>
      <% end %>
    </div>
  </div>
  <div class="pull-left activity-timestamp">
    <%= activity.created_at.strftime('%H:%M') %>
  </div>
  <div class="row navigational-breadcrumbs">
  <% unless activity.old_activity? %>
    <% if activity.subject_type.present? %>
      <%= render partial: "global_activities/references/#{activity.subject_type.underscore}.html.erb",
                 locals: { team: activity.team, subject: activity.subject, breadcrumbs: activity.breadcrumbs } %>
    <% end %>
  <% end %>
  </div>
</div>

Add sanitize input to old activity messages
Add sanitize input to old activity messages
