% foreach my $prospect_contact ( $prospect_main->prospect_contact ) {
% my $contact = $prospect_contact->contact;
<TR>
- <TH ALIGN="right"><% $prospect_contact->contact_classname %> Contact</TD>
- <TD BGCOLOR="#FFFFFF"><% $contact->line %></TD>
+ <TH ALIGN="right"><% $prospect_contact->contact_classname |h %> Contact</TD>
+ <TD BGCOLOR="#FFFFFF"><% $contact->line |h %></TD>
</TR>
%}
<TR>
<TH ALIGN="right">Tax status</TD>
<TD BGCOLOR="#FFFFFF">
- <B><% $tax_status->taxstatus %>:</B> <% $tax_status->description %>
+ <B><% $tax_status->taxstatus |h %>:</B> <% $tax_status->description |h %>
</TD>
</TR>
% }
});
die "Prospect not found!" unless $prospect_main;
-my $title = encode_entities($prospect_main->name);
-$title = mt("Prospect"). ": $title";
+my $title = mt("Prospect"). ': '. $prospect_main->name;
$title .= ' ('.mt('DISABLED').')'
if $prospect_main->disabled;