must escape config data

[freeside.git] / httemplate / edit / svc_www.cgi

diff --git a/httemplate/edit/svc_www.cgi b/httemplate/edit/svc_www.cgi
index a9f97ff..6e2db8f 100644 (file)
--- a/httemplate/edit/svc_www.cgi
+++ b/httemplate/edit/svc_www.cgi
@@ -43,7 +43,7 @@
 %
 %  $pkgnum=$cust_svc->pkgnum;
 %  $svcpart=$cust_svc->svcpart;
-%  $config=$svc_www->config;
+%  $config=$cgi->escapeHTML($svc_www->config);
 %  
 %  $part_svc=qsearchs('part_svc',{'svcpart'=>$svcpart});
 %  die "No part_svc entry!" unless $part_svc;