diff options
| author | Mark Wells <mark@freeside.biz> | 2015-11-03 13:14:24 -0800 |
|---|---|---|
| committer | Mark Wells <mark@freeside.biz> | 2015-11-03 13:14:54 -0800 |
| commit | 25b6a95af7e536f1792f5c9ace78c3748cabbb49 (patch) | |
| tree | 053b103438e3faf6f217e44aab2b9c945268ea57 /httemplate/search/report_tax-xls.cgi | |
| parent | 4ea12e50d3057cf2e6c2145579ac71dfefa6aeb0 (diff) | |
allow punctuation in tax name on XLS download of report, #33255
Diffstat (limited to 'httemplate/search/report_tax-xls.cgi')
| -rwxr-xr-x | httemplate/search/report_tax-xls.cgi | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/httemplate/search/report_tax-xls.cgi b/httemplate/search/report_tax-xls.cgi index 07fcf7cfe..c914d5adc 100755 --- a/httemplate/search/report_tax-xls.cgi +++ b/httemplate/search/report_tax-xls.cgi @@ -24,8 +24,9 @@ if ( $cgi->param('agentnum') =~ /^(\d+)$/ ) { $agentname = $agent->agentname; } -if ( $cgi->param('taxname') =~ /^([\w ]+)$/ ) { - $params{taxname} = $1; +# allow anything in here; FS::Report::Tax will treat it as unsafe +if ( length($cgi->param('taxname')) ) { + $params{taxname} = $cgi->param('taxname'); } else { die "taxname required"; } |