% foreach my $prospect_contact ( $prospect_main->prospect_contact ) {
% my $contact = $prospect_contact->contact;
<TR>
- <TH ALIGN="right"><% $prospect_contact->contact_classname %> Contact</TD>
- <TD BGCOLOR="#FFFFFF"><% $contact->line %></TD>
+ <TH ALIGN="right"><% $prospect_contact->contact_classname |h %> Contact</TD>
+ <TD BGCOLOR="#FFFFFF"><% $contact->line |h %></TD>
</TR>
%}
<TR>
<TH ALIGN="right">Tax status</TD>
<TD BGCOLOR="#FFFFFF">
- <B><% $tax_status->taxstatus %>:</B> <% $tax_status->description %>
+ <B><% $tax_status->taxstatus |h %>:</B> <% $tax_status->description |h %>
</TD>
</TR>
% }
% if ( $curuser->access_right('Qualify service') ) {
<% include( '/elements/popup_link-prospect_main.html',
'action' => $p. 'misc/qual.html',
- 'label' => 'New Qualification',
+ 'label' => 'New Qualification',
'actionlabel' => 'New Qualification',
'color' => '#333399',
'prospect_main' => $prospect_main,
});
die "Prospect not found!" unless $prospect_main;
-my $title = encode_entities($prospect_main->name);
-$title = mt("Prospect"). ": $title";
+my $title = mt("Prospect"). ': '. $prospect_main->name;
$title .= ' ('.mt('DISABLED').')'
if $prospect_main->disabled;