diff options
| author | Ivan Kohler <ivan@freeside.biz> | 2015-11-05 10:44:38 -0800 |
|---|---|---|
| committer | Ivan Kohler <ivan@freeside.biz> | 2015-11-05 10:44:38 -0800 |
| commit | 5da68ff1a7c638e30cbafbc9b0749f1e82b333df (patch) | |
| tree | ecbcbc0b06cb8af969987ad10e1d85ccf38e56da /httemplate/search | |
| parent | 88ed72cdd96321a0eeaacc3107da413ab6e9dc98 (diff) | |
| parent | 052eb9b8d16c4e81c0b6c609674e9ab768cb817d (diff) | |
Merge branch 'master' of git.freeside.biz:/home/git/freeside
Diffstat (limited to 'httemplate/search')
| -rwxr-xr-x | httemplate/search/report_tax-xls.cgi | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/httemplate/search/report_tax-xls.cgi b/httemplate/search/report_tax-xls.cgi index 07fcf7cfe..c914d5adc 100755 --- a/httemplate/search/report_tax-xls.cgi +++ b/httemplate/search/report_tax-xls.cgi @@ -24,8 +24,9 @@ if ( $cgi->param('agentnum') =~ /^(\d+)$/ ) { $agentname = $agent->agentname; } -if ( $cgi->param('taxname') =~ /^([\w ]+)$/ ) { - $params{taxname} = $1; +# allow anything in here; FS::Report::Tax will treat it as unsafe +if ( length($cgi->param('taxname')) ) { + $params{taxname} = $cgi->param('taxname'); } else { die "taxname required"; } |