fix XSS

[freeside.git] / httemplate / index.html

diff --git a/httemplate/index.html b/httemplate/index.html
index 71926aa..bc51e6a 100644 (file)
--- a/httemplate/index.html
+++ b/httemplate/index.html
@@ -46,7 +46,7 @@
 % next unless $cust_main; 
 
     <TR>
-      <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"><A HREF="view/cust_main.cgi?<% $custnum %>"><% $cust_main->display_custnum %>: <% $cust_main->name %></A></TD>
+      <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"><A HREF="view/cust_main.cgi?<% $custnum %>"><% $cust_main->display_custnum %>: <% $cust_main->name |h %></A></TD>
     </TR>
 
 %       if ( $bgcolor eq $bgcolor1 ) {