diff options
author | Ivan Kohler <ivan@freeside.biz> | 2016-11-10 11:40:06 -0800 |
---|---|---|
committer | Ivan Kohler <ivan@freeside.biz> | 2016-11-10 11:40:06 -0800 |
commit | 442d95a3514add1dda4b2adbabcb116bb9d50d71 (patch) | |
tree | c13b2ef8d1bce610829670004d63b775ec40be4f | |
parent | cfdf073924fc0d55df4382d2c23952a04c12af19 (diff) |
xss
-rw-r--r-- | httemplate/elements/table-tickets.html | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/httemplate/elements/table-tickets.html b/httemplate/elements/table-tickets.html index b322a5f7c..9247e58c6 100644 --- a/httemplate/elements/table-tickets.html +++ b/httemplate/elements/table-tickets.html @@ -57,7 +57,7 @@ View </TD> <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"> - <A HREF=<%$href%>><% $ticket->{subject} %></A> + <A HREF=<%$href%>><% $ticket->{subject} |h %></A> </TD> <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"> @@ -69,7 +69,7 @@ View </TD> <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"> - <% $ticket->{owner} %> + <% $ticket->{owner} |h %> </TD> <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"> @@ -84,12 +84,13 @@ View <% $ticket->{content} ? $ticket->{content}.' ('.$ticket->{priority}.')' : $ticket->{priority} + |h %> </TD> % if ( $ss_priority ) { <TD ALIGN="right" CLASS="grid" BGCOLOR="<% $bgcolor %>"> - <% $ticket->{"CF.{$ss_priority}"} %> + <% $ticket->{"CF.{$ss_priority}"} |h %> </TD> % } % if ( $object->isa('FS::cust_main') ) { |