projects
/
freeside.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
e08d715
)
fix XSS
author
Ivan Kohler
<ivan@freeside.biz>
Sat, 1 Jun 2013 09:26:20 +0000
(
02:26
-0700)
committer
Ivan Kohler
<ivan@freeside.biz>
Sat, 1 Jun 2013 09:26:20 +0000
(
02:26
-0700)
httemplate/edit/cust_pkg.cgi
patch
|
blob
|
history
diff --git
a/httemplate/edit/cust_pkg.cgi
b/httemplate/edit/cust_pkg.cgi
index
88e9254
..
d860499
100755
(executable)
--- a/
httemplate/edit/cust_pkg.cgi
+++ b/
httemplate/edit/cust_pkg.cgi
@@
-27,13
+27,13
@@
<TR>
<TD><INPUT TYPE="checkbox" NAME="remove_pkg" VALUE="<% $pkgnum %>"<% $checked %>></TD>
<TD ALIGN="right"><% $pkgnum %>:</TD>
<TR>
<TD><INPUT TYPE="checkbox" NAME="remove_pkg" VALUE="<% $pkgnum %>"<% $checked %>></TD>
<TD ALIGN="right"><% $pkgnum %>:</TD>
- <TD><% $all_pkg{$pkgpart}
%> - <% $all_comment{$pkgpart}
%></TD>
+ <TD><% $all_pkg{$pkgpart}
|h %> - <% $all_comment{$pkgpart} |h
%></TD>
</TR>
% foreach my $supp_pkg ( @{ $supp_pkgs_of{$pkgnum} } ) {
<TR>
<TD></TD>
<TD></TD>
</TR>
% foreach my $supp_pkg ( @{ $supp_pkgs_of{$pkgnum} } ) {
<TR>
<TD></TD>
<TD></TD>
- <TD>+ <% $all_pkg{$supp_pkg->pkgpart}
%> - <% $all_comment{$supp_pkg->pkgpart}
%></TD>
+ <TD>+ <% $all_pkg{$supp_pkg->pkgpart}
|h %> - <% $all_comment{$supp_pkg->pkgpart} |h
%></TD>
</TR>
% }
% }
</TR>
% }
% }
@@
-79,7
+79,7
@@
Order new packages
<INPUT TYPE="text" NAME="<% "pkg$pkgpart" %>" VALUE="<% $value %>" SIZE="2" MAXLENGTH="2">
</TD>
<TD ALIGN="right"><% $pkgpart %>:</TD>
<INPUT TYPE="text" NAME="<% "pkg$pkgpart" %>" VALUE="<% $value %>" SIZE="2" MAXLENGTH="2">
</TD>
<TD ALIGN="right"><% $pkgpart %>:</TD>
- <TD><% $pkg{$pkgpart}
%> - <% $comment{$pkgpart}
%></TD>
+ <TD><% $pkg{$pkgpart}
|h %> - <% $comment{$pkgpart} |h
%></TD>
</TR>
%
% $count ++ ;
</TR>
%
% $count ++ ;