fix escaping in coordinate links

diff --git a/httemplate/elements/coord-links.html b/httemplate/elements/coord-links.html
index 60882de..02a224a 100644 (file)
--- a/httemplate/elements/coord-links.html
+++ b/httemplate/elements/coord-links.html
@@ -3,7 +3,7 @@
 <& /elements/popup_link.html,
      'action'      => $p. 'view/map.html?'. $query,
      'label'       => mt('map'),
-     'actionlabel' => uri_escape_utf8($name),
+     'actionlabel' => $js_name,
      'width'       => 763,
      'height'      => 575,
      #'color'
@@ -13,7 +13,7 @@
   <& /elements/popup_link.html,
       'action'      => $p. "view/directions.html?origin=$origin;". $query,
       'label'       => mt('directions'),
-      'actionlabel' => uri_escape_utf8($name),
+      'actionlabel' => $js_name,
       'width'       => 763,
       'height'      => 575,
   &>
@@ -29,6 +29,12 @@ my $query = 'name='. uri_escape_utf8($name).
             ';lat='. $latitude.
             ';lon='. $longitude;
 
+my $js_name = $name;
+$js_name =~ s/[<>"]/ /g;
+$m->interp->apply_escapes($js_name, 'js_string');
+$js_name =~ s/^'//;
+$js_name =~ s/'$//;
+
 my $origin;
 #for directions link
 if ( $agentnum =~ /^\d+$/ ) {