X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=FS%2FFS%2Fpart_virtual_field.pm;h=ea973bafcdf91087b252e3bbe077bc28084cd47f;hb=4e35589e637aa3a3615a780d4086085c5ecb1782;hp=992d4496efa77a46855cf1f44f936e445a7b2dc9;hpb=c8cccb4a92adceb943c635fe62dad0d034462ce0;p=freeside.git

diff --git a/FS/FS/part_virtual_field.pm b/FS/FS/part_virtual_field.pm
index 992d4496e..ea973bafc 100755
--- a/FS/FS/part_virtual_field.pm
+++ b/FS/FS/part_virtual_field.pm
@@ -4,6 +4,7 @@ use strict;
 use vars qw( @ISA );
 use FS::Record qw( qsearchs qsearch );
 use FS::Schema qw( dbdef );
+use CGI qw(escapeHTML);
 
 @ISA = qw( FS::Record );
 
@@ -244,7 +245,7 @@ sub widget {
         }
       } else {
         $text .= q!<INPUT NAME="! . $self->name .
-                q!" VALUE="! . $value . q!"!;
+                q!" VALUE="! . escapeHTML($value) . q!"!;
         if ($self->length) {
           $text .= q! SIZE="! . $self->length . q!"!;
         }