fix XSS

[freeside.git] / httemplate / elements / small_prospect_view.html

diff --git a/httemplate/elements/small_prospect_view.html b/httemplate/elements/small_prospect_view.html
index 4942e8d..26e830b 100644 (file)
--- a/httemplate/elements/small_prospect_view.html
+++ b/httemplate/elements/small_prospect_view.html
@@ -1,5 +1,5 @@
 % my $link = "${p}view/prospect_main.html?". $prospect_main->prospectnum;
-Prospect: <A HREF="<%$link%>"><% $prospect_main->name %></A>
+Prospect: <A HREF="<%$link%>"><% $prospect_main->name |h %></A>
 <%init>
 
 my($prospect_main, %opt) = @_;