summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIvan Kohler <ivan@freeside.biz>2016-11-10 11:40:06 -0800
committerIvan Kohler <ivan@freeside.biz>2016-11-10 11:40:06 -0800
commit442d95a3514add1dda4b2adbabcb116bb9d50d71 (patch)
treec13b2ef8d1bce610829670004d63b775ec40be4f
parentcfdf073924fc0d55df4382d2c23952a04c12af19 (diff)
xss
-rw-r--r--httemplate/elements/table-tickets.html7
1 files changed, 4 insertions, 3 deletions
diff --git a/httemplate/elements/table-tickets.html b/httemplate/elements/table-tickets.html
index b322a5f7c..9247e58c6 100644
--- a/httemplate/elements/table-tickets.html
+++ b/httemplate/elements/table-tickets.html
@@ -57,7 +57,7 @@ View
</TD>
<TD CLASS="grid" BGCOLOR="<% $bgcolor %>">
- <A HREF=<%$href%>><% $ticket->{subject} %></A>
+ <A HREF=<%$href%>><% $ticket->{subject} |h %></A>
</TD>
<TD CLASS="grid" BGCOLOR="<% $bgcolor %>">
@@ -69,7 +69,7 @@ View
</TD>
<TD CLASS="grid" BGCOLOR="<% $bgcolor %>">
- <% $ticket->{owner} %>
+ <% $ticket->{owner} |h %>
</TD>
<TD CLASS="grid" BGCOLOR="<% $bgcolor %>">
@@ -84,12 +84,13 @@ View
<% $ticket->{content}
? $ticket->{content}.' ('.$ticket->{priority}.')'
: $ticket->{priority}
+ |h
%>
</TD>
% if ( $ss_priority ) {
<TD ALIGN="right" CLASS="grid" BGCOLOR="<% $bgcolor %>">
- <% $ticket->{"CF.{$ss_priority}"} %>
+ <% $ticket->{"CF.{$ss_priority}"} |h %>
</TD>
% }
% if ( $object->isa('FS::cust_main') ) {