diff options
author | Ivan Kohler <ivan@freeside.biz> | 2015-12-04 19:14:31 -0800 |
---|---|---|
committer | Ivan Kohler <ivan@freeside.biz> | 2015-12-04 19:14:31 -0800 |
commit | bd2049875ec183b1568bc18474878ff17e56aebf (patch) | |
tree | e584ea96810de4be2fc8a0cfac074362e3b3aa5d /rt | |
parent | 323d183847043e03b206a1d09cdd2f7c24845c73 (diff) |
fix HTML escaping, RT#34237
Diffstat (limited to 'rt')
-rw-r--r-- | rt/share/html/Elements/CalendarSlotSchedule | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/rt/share/html/Elements/CalendarSlotSchedule b/rt/share/html/Elements/CalendarSlotSchedule index 2513471..943c8ba 100644 --- a/rt/share/html/Elements/CalendarSlotSchedule +++ b/rt/share/html/Elements/CalendarSlotSchedule @@ -58,7 +58,7 @@ % #false laziness w/xmlhttp-ticket-update.html % FS::sched_avail::pretty_time($starts). '-'. % FS::sched_avail::pretty_time($due). -% ': '. encode_entities($cust_main[0]->_FreesideURILabel); +% ': '. $cust_main[0]->_FreesideURILabel; % #'install for custname XX miles away'; #XXX placeholder/more % $draggable_ticketid = $id; % $draggable_length = $due - $starts; @@ -128,7 +128,7 @@ % } % % } - ><% $content %></td> + ><% $content |h %></td> <SCRIPT TYPE="text/javascript"> $('#<% $td_id %>').data('username', "<% $username %>"); |