diff options
| author | Ivan Kohler <ivan@freeside.biz> | 2015-06-29 18:59:35 -0700 |
|---|---|---|
| committer | Ivan Kohler <ivan@freeside.biz> | 2015-06-29 18:59:35 -0700 |
| commit | 7992485be4c1f3083486760203ad8704a7e9f38d (patch) | |
| tree | 8fbfab07787084b8759c9563afa598cd762220ae /httemplate/browse | |
| parent | be109bfec54d7d87ce8a85cb2d9941eb7b551554 (diff) | |
xss
Diffstat (limited to 'httemplate/browse')
| -rwxr-xr-x | httemplate/browse/cust_attachment.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/httemplate/browse/cust_attachment.html b/httemplate/browse/cust_attachment.html index 9d62e5609..f81ec1b6b 100755 --- a/httemplate/browse/cust_attachment.html +++ b/httemplate/browse/cust_attachment.html @@ -101,7 +101,7 @@ my $orderby = $cgi->param('orderby') || 'custnum'; my $sub_cust = sub { my $c = qsearchs('cust_main', { custnum => shift->custnum } ); - return $c ? $c->name : '<FONT COLOR="red"><B>(not found)</B></FONT>'; + return $c ? encode_entities($c->name) : '<FONT COLOR="red"><B>(not found)</B></FONT>'; }; my $sub_date = sub { |