From: jeff <jeff>
Date: Mon, 18 Jun 2007 16:45:59 +0000 (+0000)
Subject: must escape config data
X-Git-Tag: freeside_1_7_3rc1~421
X-Git-Url: http://git.freeside.biz/gitweb/?a=commitdiff_plain;h=c20548156ecca9a31b24e36321f46c82b3fd1d8c;p=freeside.git

must escape config data
---

diff --git a/httemplate/edit/svc_www.cgi b/httemplate/edit/svc_www.cgi
index a9f97ff85..6e2db8f67 100644
--- a/httemplate/edit/svc_www.cgi
+++ b/httemplate/edit/svc_www.cgi
@@ -43,7 +43,7 @@
 %
 %  $pkgnum=$cust_svc->pkgnum;
 %  $svcpart=$cust_svc->svcpart;
-%  $config=$svc_www->config;
+%  $config=$cgi->escapeHTML($svc_www->config);
 %  
 %  $part_svc=qsearchs('part_svc',{'svcpart'=>$svcpart});
 %  die "No part_svc entry!" unless $part_svc;