summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIvan Kohler <ivan@freeside.biz>2012-12-17 12:24:50 -0800
committerIvan Kohler <ivan@freeside.biz>2012-12-17 12:24:50 -0800
commite12d1178ceacb68b0b8bb5fb892fb8829412080e (patch)
treec9d75d5e463776c457ce4364dfe1eb6f8cbc8f28
parent40a907b33615d7a1a5dc543ef02f4102326e743f (diff)
fix XSS
-rw-r--r--httemplate/search/customer_accounting_summary.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/httemplate/search/customer_accounting_summary.html b/httemplate/search/customer_accounting_summary.html
index e01b8cd51..0e9e24fa6 100644
--- a/httemplate/search/customer_accounting_summary.html
+++ b/httemplate/search/customer_accounting_summary.html
@@ -107,7 +107,7 @@ as <A HREF="<% "$myself;_type=xls" %>">Excel spreadsheet</A><BR>
% my $style = '';
% $style .= " rowspan=".$cell->{rowspan} if $cell->{rowspan} > 1;
% $style .= " colspan=".$cell->{colspan} if $cell->{colspan} > 1;
- <<%$td%><%$style%>><% $cell->{value} %></<%$td%>>
+ <<%$td%><%$style%>><% $cell->{value} |h %></<%$td%>>
% }
</tr>
% }